The InfoCon (aka INFOCon) meter of SANS Internet Storm Center has been moved to Yellow state recently: http://isc.sans.org/infocon.php Related ISC Diary entry http://isc.sans.org/diary.php?storyid=1727 states that VML exploit is becoming more widespread. The entry lists Outlook 2003 as affected too. - Juha-Matti