CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2010-07-22
Microsoft Windows Shell Shortcut (.LNK/.PIF) Icon Parsing Remote Code Execution Vulnerability (CVE-2010-2568)
[Affected Scope] Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1/SP2, Server 2008 SP2/R2, and Windows 7
[Impact] Local or remote attackers can execute arbitrary code with system privileges simply by tricking a user into viewing a folder containing a crafted .LNK or .PIF file
[Mitigation] Apply the official Microsoft MS10-046 security patch immediately, or implement workarounds to disable shortcut icon rendering and block outbound SMB/WebDAV traffic