A possible page fault in gdi32!CreateBrushIndirect which is caused by an invalid pointer access, this is what an email to the Full-Disclosure mailing stated. Inlcuded also in this mail is a PoC for this new WMF vulnerability. According to my testing, it did indeed crash explorer and rendered my WinXP SP2 machine useless even for a while although no malware has been seen using this, Trend Micro is now studying what possible solutions it can offer clients to protect them from this.

Christina Aguilera Showing Off.wmv, this is the attachment of a current spam being reported to us. Trend Micro already detects this file as TROJ_WIMAD.C. This file is not an executable file, it is a Windows Media file. You will need a license to play this file and Windows Media Player acquires the license for the user. But as soon as the user clicks on I agree or Play it, it will download a known Adware which Trend Micro already detects as ADW_ZANGO.T.

The Virus Report for this Trojan is currently being created and we will update you on this for more information regarding the said Trojan.