From SANS:

Updated version of Ilfak Guilfanov’s patch

Published: 2006-01-01,Last Updated: 2006-01-01 18:54:14 UTC by Tom Liston

Ilfak Guilfanov has released an updated version of his unofficial patch for the Window’s WMF issue. We have reverse engineered, reviewed, and vetted the version here. Note: If you’ve already successfully installed the patch, this new version adds nothing new. It only adds code to make it able to install on some other very specific configurations and code to recognize when the patch has already been installed.MD5: 14d8c937d97572deb9cb07297a87e62a – wmffix_hexblog13.exe

Here is a list of changes from version 1.1 from Ilfak Guilfanov at Hex Blog:

Version 1.2: if the hotfix has already been applied to the system, informs the user at the second installation attempt. Version 1.3: added support for Windows 2000 SP4

If you have already installed version 1.1 you do not need to reinstall. This path should work for Windows 2000, XP 32-bit, XP 64-bit, and Windows Server 2003.


Eric Sites
VP of Research & Development