Microsoft's Fix It for Stuxnet vulnerability

Stephen Withers
Thursday, 22 July 2010 10:33

Business IT - Security

Microsoft has released a temporary fix for a Windows Shell vulnerability that is being exploited by the Stuxnet malware.

Earlier this month, Microsoft warned of real-world attacks exploiting a vulnerability in Windows Shell that allowed the execution of code during the display of a maliciously crafted shortcut's icon.

The issue can be exploited via USB drives, network shares, and WebDAV. It does not use the AutoPlay feature.

Microsoft has suggested three workarounds while a permanent fix was being developed: a registry change that disables the display of shortcut icons, disabling the WebClient service, and using a network firewall or similar to block the download of LNK and PIF files from the Internet.

The vulnerability is being exploited in conjunction with the Stuxnet malware, which is now blocked by most, if not all, security products.

Microsoft has now released an automated 'Fix It' to suppress the display of shortcut icons. The Fix It works on Windows XP, Vista, Windows 7, Server 2003, and Server 2008.

The Fix It is not without its problems - see page 2.