The threat of the .LNK bug looms

[cthulhu_waves]

It never ends, doesn't it?

SUNNYVALE, Calif. — Microsoft has issued an advisory for the vulnerability affecting all current versions of Windows, including the recently released service pack one of Windows 7 and Windows server 2008 R2.

PCMag reports the bug comes from Windows improperly handling shortcut (.LNK) files executed through the shell, typically Windows Explorer.

When the user launches such a shortcut through the associated icon, Windows fails to properly validate the parameters of the shortcut and malicious code in the .LNK may be executed.

The attack would typically be performed through removable drives, like USB thumb drives of CD-ROMs.

Read the entire article here.

[mosesreef]

boohoo

[Gyongyos]

Microsoft is a giant and they should care about what they do because they can cause huge loss to companies if they give out a "security hole packed" of version of their operating system but it seems they don't really care. They earn more than any other software company and I believe they have enough money to hire thousands of Beta testers but it seems that they are not willing to invest a single cent to make sure that the software they are going to sell for serious money is bug free.

For the same reason I have decided to never upgrade my operating system, yes, I still use the first service pack of XP. I've bought it from a tech store several years ago and it truly was one of the last XP CDs issued by Microsoft before working on the second service pack. It is completely bug free and I'm happy with it.