Microsoft Windows XP/2003 Picture and Fax Viewer / Wine / ME code execution

Buffer overflow on parsing WMF metafiles. It may be used for silent Spyware/Trojan installation with Internet Explorer or another browser and also with Lotus Notes. There are vulnerabilities not covered by MS06-001...