All that's required to exploit this is an e-mail message.

This one has massive financial implications if someone exploits it.

What I find bizarre is that there's still all this focus on the WMF [Windows Metafile] bug.