Here's some more info and work around for the exploit WMF 0-day

Avast! users can use URL Blocking in WebShield to block all *.wmf files.

See the nasty in action (safe) http://www.websensesecuritylabs.com/.../wmf-movie.wmv