New potential problem on the horizon for all users of Windows: it was recently identified a new security flaw in the Windows Shell component system that puts at risk the safety of computer that is installed on any version of Windows, this is a vulnerability that has already been used successfully to launch various attacks. The problem lies in the mismanagement of the shortcut file. Lnk Windows: creating a file. Lnk malicious it is possible to load into memory any program, including harmful. To kick off the attack does not is necessary for the user from the victim in malicious application on its own initiative, but it is enough that the user enters the folder where the file is present. According to security bulletin released by Microsoft (Microsoft Security Advisory 2286198, Vulnerability in Windows Shell Could Allow Remote Code Execution) it seems that the problem is rather serious, since it allows malicious code to run automatically without direct intervention on the part of 'user. At the moment there is still no patch to solve the problem. In order to secure their systems, Microsoft suggests disabling the display of icons file.lnk, the procedure is described in Microsoft security bulletin alla sezione Workarounds : 1. Click Start, click Run, type Regedit in the Open box, and then click OK
2. Locate and then click the following registry key: HKEY_CLASSES_ROOT\lnkfile\shellex\IconHandler
3. Click the File menu and select Export
4. In the Export Registry File dialog box, enter LNK_Icon_Backup.reg and click Save - Note This will create a backup of this registry key in the My Documents folder by default
5. Select the value (Default) on the right hand window in the Registy Editor. Press Enter to edit the value of the key. Remove the value, so that the value is blank, and press Enter.
6. Restart explorer.exe or restart the computer.
I sistemi vulnerabili sono :
- Windows XP Service Pack 3
- Windows XP Professional x64 Edition Service Pack 2
- Windows Server 2003 Service Pack 2
- Windows Server 2003 x64 Edition Service Pack 2
- Windows Server 2003 with SP2 for Itanium-based Systems
- Windows Vista Service Pack 1 and Windows Vista Service Pack 2
- Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2
- Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2
- Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2
- Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
- Windows 7 for 32-bit Systems
- Windows 7 for x64-based Systems
- Windows Server 2008 R2 for x64-based Systems
- Windows Server R2 2008 for Itanium-based Systems.
