This host is missing a critical security update according to Microsoft Bulletin MS10-046.

Successful exploitation could allow remote attackers to automatically execute a malicious binary by tricking a user into browsing a remote network or WebDAV share, or opening in Windows Explorer a removable drive containing a specially crafted shortcut file. Impact Level: System

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/Bulletin/MS10-046.mspx

The flaw is due to an error in Windows 'Shell' when parsing shortcuts (.lnk or .pif), certain parameters are not properly validated when attempting to load the icon.

Micorsoft Windows 7 Microsoft Windows XP Service Pack 3 and prior. Microsoft Windows 2003 Service Pack 2 and prior. Microsoft Windows Vista Service Pack 1/2 and prior. Microsoft Windows Server 2008 Service Pack 1/2 and prior.

• http://community.websense.com/blogs/securitylabs/archive/2010/07/20/microsoft-lnk-vulnerability-brief-technical-analysis-cve-2010-2568.aspx
• http://isc.sans.edu/diary.html?storyid=9181
• http://isc.sans.edu/diary.html?storyid=9190
• http://secunia.com/advisories/40647
• http://www.ivanlef0u.tuxfamily.org/?p=411
• http://www.kb.cert.org/vuls/id/940193

---

Updated on 2015-03-25