I post at SearchCommander.com now, and this post was published 18 years 10 months 18 days ago. This industry changes FAST, so blindly following the advice here *may not* be a good idea! If you're at all unsure, feel free to hit me up on Twitter and ask.
Some of these websites are up and some are down, but all these four will do the trick –
Go do it NOW!
http://www.grc.com/miscfiles/wmffix_hexblog14.exe
http://www.hexblog.com/security/files/wmffix_hexblog14.exe
http://handlers.sans.org/tliston/wmffix_hexblog14.exe