346 matches found
Zeus Botnet Using Windows LNK Flaw
Isolated strains of mainstream malware that took advantage of how the zero-day Windows flaw first exploited by the sophisticated Stuxnet worm began appearing late last week. The same approach has since been applied by the dodgy sorts behind Zeus, a family of sophisticated toolkits frequently used...
New Malware Emerges to Exploit Windows LNK Flaw
Researchers have found two distinct new malware families that are exploiting the newly discovered Windows shell LNK vulnerability, leading to concerns that the development of a worm could be in the offing. One of the new pieces of malware, dubbed Chymine by researchers at Eset, exploits the LNK...
Immunity Canvas: WINDOWS_SHELL_LNK
Name| windowsshelllnk ---|--- CVE| CVE-2010-2568 Exploit Pack| CANVAS Description| windowsshelllnk Notes| CVE Name: CVE-2010-2568 VENDOR: Microsoft Notes: VersionsAffected: Windows XP, Windows 2003, Windows Vista, Windows 2008, Windows 7 Repeatability: Infinite References:...
Code injection
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted 1 .LNK or 2 .PIF shortcut file, which is not properly handled during icon display in Windows Explorer...
Windows Shell LNK file CONTROL item command execution
Added: 07/22/2010 CVE: CVE-2010-2568 BID: 41732 OSVDB: 66387 Background Microsoft Windows supports LNK files, also known as shortcuts, which are references to other files. Shortcuts can be placed in a location which is convenient for users such as the Desktop or Start menu, from which they can be...
Windows Shell LNK file CONTROL item command execution
Added: 07/22/2010 CVE: CVE-2010-2568 BID: 41732 OSVDB: 66387 Background Microsoft Windows supports LNK files, also known as shortcuts, which are references to other files. Shortcuts can be placed in a location which is convenient for users such as the Desktop or Start menu, from which they can be...
PT-2010-1167 · Microsoft +1 · Windows Explorer +3
Name of the Vulnerable Software and Affected Versions: Microsoft Windows versions XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 Description: The issue is related to errors in processing files with .LNK or .PIF extensions. Exploitation of this issue can allow a...
Windows Shell LNK file CONTROL item command execution
Added: 07/22/2010 CVE: CVE-2010-2568 BID: 41732 OSVDB: 66387 Background Microsoft Windows supports LNK files, also known as shortcuts, which are references to other files. Shortcuts can be placed in a location which is convenient for users such as the Desktop or Start menu, from which they can be...
Microsoft Releases FixIt Tool for LNK Flaw
Microsoft has released a FixIt tool for the unpatched LNK Windows shell vulnerability and also has updated its guidance on how to deal with the flaw. The company also said it is continuing to work on developing a patch for the vulnerability. The FixIt tool that Microsoft published Tuesday mitigat...
Microsoft Windows Shell LNK Code Execution
$Id: ms10xxxwindowsshelllnkexecute.rb 9888 2010-07-20 19:54:56Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Windows Zero Day Expected to Be Bad
A zero-day flaw being used in targeted attacks against organizations worldwide has security experts worried that the threat could spread further. Concerns about additional attacks using the “LNK” vulnerability in Windows machines prompted the SANS Internet Storm Center today to raise its Infocon...
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
Microsoft Windows - Automatic .LNK Shortcut File Code Execution From: http://www.ivanlef0u.tuxfamily.org/?p=411 1. Unzip the files in 'C: '. Start a DbgView or paste a KD to your VM. 2. Rename 'suckme.lnk' to 'suckme.lnk' and let the magic do the rest of shell32.dll. 3. Look at your logs...
Microsoft Windows - Automatic .LNK Shortcut File Code Execution
From: http://www.ivanlef0u.tuxfamily.org/?p=411 1. Unzip the files in 'C: '. Start a DbgView or paste a KD to your VM. 2. Rename 'suckme.lnk' to 'suckme.lnk' and let the magic do the rest of shell32.dll. 3. Look at your logs. http://ivanlef0u.nibbles.fr/repo/suckme.rar...
Microsoft Windows Automatic LNK Shortcut File Code Execution
Exploit for windows platform in category local exploits ============================================================ Microsoft Windows Automatic LNK Shortcut File Code Execution ============================================================ 1. Unzip the files in 'C: '. Start a DbgView or paste a KD...
Microsoft Windows Shell LNK File Parsing Code Execution (MS10-046; CVE-2010-2568)
The Shell organizes objects necessary for running applications into a hierarchical namespace and provides users and applications with a consistent and efficient way to access and manage objects. A code execution vulnerability has been reported in Windows Shell. The vulnerability is due to an erro...
VeriSign Revokes Certificate Used to Sign Stuxnet Malware
The digital certificate that belonging to Realtek Semiconductor that was used to sign a pair of drivers fro the new Stuxnet rootkit has been revoked by VeriSign. The certificate was revoked Friday, several days after news broke about the existence of the new malware and the troubling existence of...
Microsoft Windows Shell LNK Code Execution
This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This creates an SMB resource to provide the payload inside a DLL, and generates a LNK file which must be sent to the target. Module Options msf use...
Microsoft Windows Shell LNK Code Execution
This module exploits a vulnerability in the handling of Windows Shortcut files .LNK that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path. Module Options msf use...
Microsoft Windows .LNK Vulnerability
US-CERT is aware of a vulnerability affecting Microsoft Windows. This vulnerability is due to the failure of Microsoft Windows to properly obtain icons for .LNK files. Microsoft uses .LNK files, commonly referred to as "shortcuts," as references to files or applications. By convincing a user to...
