History Lesson: What Is a .wmf File? Why Clip Art Shows a Blank Box

What is a .wmf file?

A .wmf file is a Windows Metafile: a 16-bit format that stores a sequence of records of Windows GDI drawing commands. A viewer does not “decode a photo” the way it does a JPG — it plays those commands into a device context, much as RFC 7903 compares metafile playback to how PostScript is executed to produce output. WMF can hold vector and raster graphics together.

Microsoft released WMF with Windows 3.0; RFC 7903 frames the format as released in 1990. Early public documentation appears in the Windows 3.1 SDK (1992), again per that RFC. For a generation of Office and Windows clip art, logos, and diagrams — plus clipboard, print, and document embedding — WMF was the native vector vehicle. RFC 7903 also notes that WMF is referenced non-normatively in OOXML, which is one reason interoperability still matters.

WMF vs EMF (and EMF+)

EMF (Enhanced Metafile) arrived with Windows NT 3.1 in 1992. It is 32-bit and Win32-based, designed for device independence as the successor to the more device-dependent WMF. Coordinates and record layout grow up with Win32; the playback model is still “replay GDI,” but with a cleaner, resolution-friendlier container.

EMF+ came with Windows XP / GDI+: GDI+ records embedded inside EMF comment records. Microsoft’s GDI+ docs describe EMF+ Only and EMF+ Dual variants. Important recording rule: GDI+ can display WMF, EMF, and EMF+, but it can record only EMF / EMF+ — not WMF. Own the naming stack: WMF (16-bit classic) → EMF (32-bit enhanced) → EMF+ (GDI+ extensions).

Why does old clip art show a blank box?

A blank box in a modern app is usually failed or refused playback, not an empty file. Late December 2005, CVE-2005-4560 described crafted WMF files that used SETABORTPROC via META_ESCAPE / the GDI Escape path to run code — the Metafile Image Code Execution (MICE) issue. Microsoft shipped MS06-001 on January 5, 2006. An MSRC blog explained the SetAbortProc print-abort callback heritage; Internet Explorer skipped META_ESCAPE, but an IFRAME → shell → Windows Picture and Fax Viewer path was a known vector. RFC 7903 notes that MICE won 2007 Pwnie awards for “Mass 0wnage” and “Breaking the Internet.”

RFC 7903 also states that EMF was not afflicted by that specific MICE flaw. Still, after 2005–2006, many products hardened, sandboxed, or simply dropped GDI metafile pipelines. In 2026, a blank box often means security policy plus missing playback — not “the clip art vanished.”

How the bytes work (placeable WMF and EMF headers)

Many .wmf files start with an optional Aldus Placeable Metafile header: 22 bytes before the standard META_HEADER. The key must be 0x9AC6CDD7 — little-endian bytes D7 CD C6 9A. The placeable header also carries a bounding box, an inch field (units per inch), and a checksum. Classic Windows PlayMetaFile does not accept the placeable header; strip the first 22 bytes, then play the remaining WMF. Placeable and non-placeable .wmf are both legitimate variants — own that confusion when a hex dump “doesn’t match the SDK sample.”

For EMF, RFC 7903 describes the opening EMR_HEADER: Type is the little-endian DWORD 0x00000001, and Size should be at least 88. After the header come enhanced metafile records that a Win32 playback path interprets. Specs matter for interoperability: Microsoft published [MS-WMF], [MS-EMF], and [MS-EMF+] under the Open Specification Promise (RFC 7903: since 2007). Media types image/wmf and image/emf are registered in RFC 7903 (September 2016).

Why .wmf and .emf legacy files still sit on disks in 2026

Old Office and Publisher clip-art libraries, logos, and diagrams still use these formats. Files get extracted from or sit beside legacy documents — binders, branding kits, and project folders from the metafile era. The large body of clip art already shipped is why WMF / EMF keep showing up even when everyday apps blank them out.

You do not need a specialty forensics toolkit just to see the artwork again. For the practical how-to, see When Old WMF / EMF Clip Art Won't Display. Legacy File Converter converts .wmf / .emf to PNG, JPG, or PDF offline on this PC.