gfxgfx
 
Please login or register.

Login with username, password and session length
 
gfx gfx
gfx
76774 Posts in 13500 Topics by 1651 Members - Latest Member: insider4ever March 29, 2024, 08:50:10 am
*
gfx*gfx
gfx
WinMX World :: Forum  |  Discussion  |  WinMx World News  |  New Windows Shortcut zero-day exploit confirmed
gfx
gfxgfx
 

Author Topic: New Windows Shortcut zero-day exploit confirmed  (Read 1229 times)

0 Members and 1 Guest are viewing this topic.

New Windows Shortcut zero-day exploit confirmed
« on: July 21, 2010, 09:27:54 am »
Quote from: ars technica article
Reports have been circulating for a few weeks about a new attack being targeted at certain Windows users that used USB memory sticks to propagate. More details have now emerged, including confirmation  from Microsoft that a new flaw exists and is being exploited.

The attack uses specially crafted shortcut (.lnk) files, which trick Windows into running code of an attacker's choosing. Any Windows application that tries to display the shortcut's icon—including Explorer—will cause exploitation, so even the mere act of browsing a directory with the malicious shortcuts is sufficient for a system to be exploited. Analysis suggests that the shortcuts are not improperly formed; rather they depend on a flaw in the way that Windows handles shortcuts to Control Panel icons.

arstechnica article
OCAU forum discussion

Offline White Stripes

  • Core
  • *****
  • ***
  • Je suis aimé
Re: New Windows Shortcut zero-day exploit confirmed
« Reply #1 on: July 21, 2010, 12:43:16 pm »
damn... they just keep coming...

Quote
Microsoft doesn't list Windows 2000 or Windows XP Service Pack 2 as vulnerable, but this is because they are no longer supported—they are just as vulnerable as more recent versions, but will not receive a patch.

win2k should at least get the patch... but of course this could be a way to get 2k users to switch to linux as nothing ms offers today is as 'lite' as 2k...

Re: New Windows Shortcut zero-day exploit confirmed
« Reply #2 on: July 21, 2010, 01:23:11 pm »
I wonder how many staff who work for microsoft actually run a linux flavour on their work machines...

WinMX World :: Forum  |  Discussion  |  WinMx World News  |  New Windows Shortcut zero-day exploit confirmed
 

gfxgfx
gfx
©2005-2024 WinMXWorld.com. All Rights Reserved.
SMF 2.0.19 | SMF © 2021, Simple Machines | Terms and Policies
Page created in 0.026 seconds with 22 queries.
Helios Multi © Bloc
gfx
Powered by MySQL Powered by PHP Valid XHTML 1.0! Valid CSS!