[FSC] Zero-Day Vulnerability in Windows Shell

Microsoft has released Security Advisory 2286198, which provides details on the LNK shortcut (Windows Shell) vulnerability that's currently being exploited by the Stuxnet rootkit.

The news is not good.

Besides USB devices, the Windows Shell vulnerability can also be exploited via Windows file shares and WebDav.

All versions of Windows are affected:

http://www.f-secure.com/weblog/archi...ry_2286198.png

Vulnerable versions include Windows XP Service Pack 2 which is not listed by the advisory due to its recent end-of-support status.

If there's to be no patch for SP2, users will need to implement the suggested workarounds:

• Disable the displaying of icons for shortcuts
• Disable the WebClient service

See Microsoft's Security Advisory for details. On 17/07/10 At 10:04 AM

**Hidden Content: To see this hidden content your post count must be 1 or greater.**