More WMF problems for Microsoft CNET News.com: "Bugs affecting components of software typically come out in bunches, Murray said. 'A few years ago it was IIS, then SQL Server, then RPC, now it's the Windows Graphics Engine,' he said. IIS is Internet Information Services (the Web server part of Windows Server), SQL Server is Microsoft's database product, and RPC is the Remote Procedure Call component.
The newly reported Windows issues aren't as serious as the one Microsoft just patched--at least, not yet, Murray cautioned. 'In the current release, they're only denial-of-service attacks. However, it's likely that they could be leveraged to be more severe. 'If it's possible to write an exploit to take control of an attacked machine, we'll see one in the next week or two,' he said.
Microsoft is not aware of any attacks that use the newly disclosed issues as a conduit, it said. "