HomeCommunitySecurity Blog

Security Blog

 

New USB virus spread using Windows Shortcut Vulnerability

Posted By Netgear Threat Lab at 4:40 PM, August 5, 2010

Recently a new virus is using the Windows Shortcut Vulnerability is quickly spreading through removable storage devices.

Earlier, Microsoft released the advisory, "this vulnerability exists because Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the icon of a specially crafted shortcut is displayed. This vulnerability is most likely to be exploited through removable drives."

The vulnerability exists in almost all currently supported Windows versions. This means a lot of Windows users may potentially be affected when they use Explorer or any other file manager which can display icons. When they open a malicious .lnk file in USB storage, they will be infected - even if they turn off autorun for that particular device.

Currently, Microsoft has not released a patch for the vulnerability. Users can disable displaying icons for all shortcuts for the time being to avoid the vulnerability being exploited. Detailed steps can be found in the microsoft security advistory.

Posted by: Netgear Threat Lab at 4:40 PM
Categories: Netgear Threat Lab

No TrackBacks

TrackBack URL: http://prosecure.netgear.com/cgi-bin/mt/mt-tb.cgi/102

Comments