• info
• discussion
• exploit
• solution
• references

Microsoft Windows Shortcut 'LNK/PIF' Files Automatic File Execution Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for more information.


Microsoft Windows Server 2008 for 32-bit Systems SP2

• Microsoft Security Update for Windows Server 2008 (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=3AABD189-7D4C -4C9F-8854-F33127B1C309

Microsoft Windows Server 2008 for x64-based Systems R2

• Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=0D9DD09B-DB40 -462B-88B0-4DBB8180E81F

Microsoft Windows Server 2003 Datacenter x64 Edition SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=923DE214-C4FA -41E6-8307-2C5A37F13E8E

Microsoft Windows XP Media Center Edition SP3

• Microsoft Security Update for Windows XP (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=12361875-B453 -45E8-852B-90F2727894FD

Microsoft Windows 7 for 32-bit Systems 0

• Microsoft Security Update for Windows 7 (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=22E62B5C-E4C1 -47D0-AE4A-8BD2D70D0A0A

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=32FE91EF-5A8D -4095-90EE-2CA216696B09

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=3B44BD67-48E2 -497F-9165-42A702E2CC0D

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=923DE214-C4FA -41E6-8307-2C5A37F13E8E

Microsoft Windows Vista x64 Edition SP1

• Microsoft Security Update for Windows Vista for x64-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=37648E95-05C2 -4802-9A0F-660200BAA229

Microsoft Windows XP Tablet PC Edition SP3

• Microsoft Security Update for Windows XP (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=12361875-B453 -45E8-852B-90F2727894FD

Microsoft Windows Vista SP1

• Microsoft Security Update for Windows Vista (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=52748886-6280 -4247-8CBD-F64DB229EE66

Microsoft Windows Server 2008 for x64-based Systems 0

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=29C6FC2D-D318 -4A63-9AB2-82E84272AAF2

Microsoft Windows Server 2008 for Itanium-based Systems SP2

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=CFE227B5-6660 -49F8-9D71-A997DD83DE0B

Microsoft Windows Server 2003 SP2

• Microsoft Security Update for Windows Server 2003 (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=32FE91EF-5A8D -4095-90EE-2CA216696B09

Microsoft Windows 7 for x64-based Systems 0

• Microsoft Security Update for Windows 7 for x64-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=9499F771-C388 -4DE3-A5C7-8CC8B00B4395

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Windows Server 2003 (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=32FE91EF-5A8D -4095-90EE-2CA216696B09

Microsoft Windows Server 2008 for x64-based Systems SP2

• Microsoft Security Update for Windows Server 2008 x64 Edition (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=29C6FC2D-D318 -4A63-9AB2-82E84272AAF2

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=63AA5F8A-FE47 -4892-B905-B54E4F3B6580

Microsoft Windows Vista SP2

• Microsoft Security Update for Windows Vista (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=52748886-6280 -4247-8CBD-F64DB229EE66

Microsoft Windows XP Home SP3

• Microsoft Security Update for Windows XP (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=12361875-B453 -45E8-852B-90F2727894FD

Microsoft Windows Server 2008 for Itanium-based Systems R2

• Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=CE2BB5D4-F661 -44E3-AC28-0B81F7B72670

Microsoft Windows Server 2008 for Itanium-based Systems 0

• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=CFE227B5-6660 -49F8-9D71-A997DD83DE0B

Microsoft Windows Vista x64 Edition SP2

• Microsoft Security Update for Windows Vista for x64-based Systems (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=37648E95-05C2 -4802-9A0F-660200BAA229

Microsoft Windows Server 2008 for 32-bit Systems 0

• Microsoft Security Update for Windows Server 2008 (KB2286198)
  http://www.microsoft.com/downloads/details.aspx?familyid=3AABD189-7D4C -4C9F-8854-F33127B1C309