Microsoft Windows automatically executes code specified in shortcut files

ronjor · Aug 3, 2017

Original Release date: 03 Aug 2017 | Last revised: 03 Aug 2017

Impact
By convincing a user to display a specially-crafted shortcut file, an attacker may be able to execute arbitrary code with the privileges of the user. Depending on the operating system and AutoRun/AutoPlay configuration, this can happen automatically by connecting a USB device.

Solution
Apply an update
This issue is addressed in the Microsoft Update for CVE-2017-8464.
Click to expand...

J_L · Aug 4, 2017

...LNK exploit 2.0?

guest · Aug 4, 2017

J_L said: ↑

...LNK exploit 2.0?
Click to expand...

seems the case

Minimalist · Aug 5, 2017

Microsoft Attempts To Fix Stuxnet For The Third Time

Discovering Microsoft’s two previous attempts to fix the vulnerability had failed Microsoft released the June patch to address vulnerability CVE-2017-8464. Microsoft confirmed that the flaw had been exploited in the wild. Exploits for the vulnerability are currently available for Metasploit, with videos available on Youtube on how to exploit the vulnerability.
Click to expand...

http://securityaffairs.co/wordpress/61701/hacking/microsoft-fix-stuxnet.html

Log in or Sign up

Microsoft Windows automatically executes code specified in shortcut files

ronjor Global Moderator

J_L Registered Member

guest Guest

Minimalist Registered Member

Log in or Sign up

Microsoft Windows automatically executes code specified in shortcut files

ronjor Global Moderator

J_L Registered Member

guest Guest

Minimalist Registered Member

Useful Searches