I know some here don't really put much stock into Steve Gibson over at GRC, so pretend it's someone else kay
Anyways, there is a nice little app:
M.I.C.E.GRC's "MouseTrap" MICE detection utility,
and the facts about Windows Metafile
Image Code Execution