In association with heise online

30 July 2010, 18:44

Microsoft to release LNK patch on Monday

  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

Microsoft has announced that it will be distributing an out of band update on Monday August 2nd at 10:00 PDT (18:00 UK Time); this will address the LNK vulnerability that was recently discovered, exploited and been used in attacks. The advisory for the vulnerability explains that it involves the incorrect parsing of icons in shortcut files and can be exploited locally with USB flash drives or remotely through network shares and WebDAV.

Microsoft says that it has completed testing of the fix for the issue which affects Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008 and Windows 7. A previously released "Fix It" from Microsoft prevented the display of icons for the shortcut files which made the Windows desktop quite confusing. Third party manufacturers also provided antivirus tools which attempted to fix the issue but which had their own problems.

Microsoft also confirms that the company has seen an increase in attempts to exploit the vulnerability and that releasing the update out of band "is the best thing to do to help protect our customers". The update will be distributed through the automatic update mechanism of Windows.

(djwm)

Print Version | Send by email | Permalink: http://h-online.com/-1048785
 


  • July's Community Calendar





The H Open

The H Security

The H Developer

The H Internet Toolkit