Microsoft continues to have problems with its WMF handling. While the zero-day problem was corrected, other problems have crept up around the very same program. Microsoft released the fix last week but it looks like they've got some more work to do.

The problems involve two different functions being exploited, "ExtCreateRegion" and "ExtEscape." The function originally exploited was the "SetAbortProc." These are multiple memory corruption vulnerabilities. While there are problems with the new findings, they aren't quite as serious as the other one. The problem itself shows up when users view malicious WMF files with special data.