Barney's Blog

Blog archive

Microsoft Issues Zero-Day Warning, Fix-It Tool for 'Shortcut' Flaw

On Friday, Microsoft issued a zero-day (a.k.a. "It's here!") warning about a security flaw that can allow malicious code to get through to Windows desktops and servers (including Windows 7 and Windows Server 2008 R2) via "specially crafted" shortcut icons on attached devices such as USB drives.

Although an official patch has yet to arrive, Redmond yesterday released a so-called "Fix-it" tool that can implement the recommended workaround (disabling shortcut files) for you; the support page (KB338619) also offers instructions for doing the steps manually.

A complete list of the affected software is available on the security advisory here.

The flaw is associated with the spread of the "Stuxnet worm." More information on the underlying Stuxnet malware is available here.
-- By Becky Nagel

Posted by Becky Nagel on July 21, 2010 at 11:53 AM


Featured

  • The 2020 Microsoft Product Roadmap

    From the next major update to Windows 10 to the next generations of .NET and PowerShell, here's what's on tap from Microsoft this year.

  • 2020 Microsoft Conference Calendar: For Partners, IT Pros and Developers

    Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss. (Now updated with COVID-19-related event changes.)

  • Microsoft Closing Most of Its Retail Stores

    Microsoft on Friday announced a major shift in its retail operations, with plans to close most of its physical Microsoft Store outlets in favor of online sales.

  • Matrix

    Microsoft, Harvard Describe Joint Privacy Initiative

    To facilitate data sharing while still preserving data privacy, Microsoft and Harvard have embarked on a set of open source tool called the "OpenDP Initiative."

RCP Update

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.