PSA: Microsoft releases official patch for WMF vulnerability
There's now an official patch from Microsoft for the WMF vulnerability in Windows. Fixes are available for WS2K SP4, Windows XP SP1 and SP2, and WS2K3 (also for Itanium and x64 releases).
Go here to read the bulletin and download the fixes.
It looks like the page is still rolling out to all the edge servers, so keep trying.
Update: stevewpalmer points out that the patches will be on Microsoft Update now.