XP/Windows 7 broke out of critical vulnerability

  


According to foreign media reports, Microsoft recently warned that there is a critical security vulnerability in the Windows Shell framework. When users parse the .lnk shortcut method, the vulnerability can pass a specially crafted shortcut. Automatically activate malicious programs.

This vulnerability affects all versions of Windows systems, including XP and Windows 7. In Windows 7, the vulnerability bypasses the operating system's security policy because no administrator privileges are required.

Microsoft Corporation Statement:

"Microsoft is investigating a limited, targeted security vulnerability in Windows Shell. This announcement will announce which versions of Windows will be affected and will provide relevant The solution exists. Because the vulnerability exists when Windows clicks on a specially crafted shortcut icon, Windows incorrectly resolves a possible shortcut to malicious code. This vulnerability is most likely to occur on removable disks. Propagation. If the system has disabled autoplay, the user needs to manually check the root folder of the removable disk. For Windows 7 systems, the removable disk automatically disables autoplay."

Affected Software includes:

Windows XP SP3

64-bit Windows XP SP 2 Professional

Windows Server 2003 SP 2

64-bit Windows Server 2003 SP 2

Itanium-based Windows Server 2003 SP2

Windows Vista SP1 and Windows Vista SP2

64-bit Windows Vista SP1 and 64-bit Windows Vista SP 2< Br>

32-bit Windows Server 2008 and 32-bit Windows Server 2008 SP 2

64-bit Windows Server 2008 and 64-bit Windows Server 2008 SP 2

Itanium-based Windows Server 2008 and Itanium-based Windows Server 2008 SP 2

32-bit Windows 7

64-bit Windows 7

64-bit Windows Server 2008 R2

Itanium-based Windows Server 2008 R2

< BR>

Copyright © Windows knowledge All Rights Reserved