If you can grok assembler, you can see the details of the WMF patches, and how close the unofficial and official patches are. The amazing thing to me [at least] is that there was/is an MS staffer commenting and helping people out in that Something Awful thread I posted a few days ago. He (or she?) provided some very cool info on how it all went down.
See the changes to gdi here:
http://blogs.securiteam.com/index.php/archives/184
Also of note: This WMF stuff reminds me A LOT of 'the BBS days' when ANSI.SYS under DOS could remap keys and you could get ANSI bombed with a keystroke that would format your hard drive without any interaction. Use of a function meant for good, for bad purposes.
