Microsoft · Windows
CVE-2010-2568
Microsoft Windows Remote Code Execution Vulnerability
Qué es
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
CISA: Microsoft Windows incorrectly parses shortcuts in such a way that malicious code may be executed when the operating system displays the icon of a malicious shortcut file. An attacker who successfully exploited this vulnerability could execute code as the logged-on user.
Qué hacer
Apply updates per vendor instructions.
Plazo para las agencias federales de EE. UU.: 6 de octubre de 2022
- Añadida a la lista de CISA
- 15 de septiembre de 2022
- Publicada
- 22 de julio de 2010
- Gravedad
- Alto 7,8 CVSS 3.1
- Probabilidad de ataques en los próximos 30 días (EPSS)
- 90% entre el 0,2% superior de todas las vulnerabilidades conocidas
- Debilidad
- CWE-20
- Más detalles
- NVD · CVE.org · CISA
Todas las referencias (14)
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046
- http://www.us-cert.gov/cas/techalerts/TA10-222A.html
- http://isc.sans.edu/diary.html?storyid=9181
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11564
- http://www.f-secure.com/weblog/archives/00001986.html
- http://www.kb.cert.org/vuls/id/940193
- http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/
- http://secunia.com/advisories/40647
- http://www.microsoft.com/technet/security/advisory/2286198.mspx
- http://isc.sans.edu/diary.html?storyid=9190
- http://www.securityfocus.com/bid/41732
- http://www.f-secure.com/weblog/archives/new_rootkit_en.pdf
- https://www.geoffchappell.com/notes/security/stuxnet/ctrlfldr.htm
- http://securitytracker.com/id?1024216
Más fallos explotados de Microsoft
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 13 oct 2026 | Command Injection | Windows | Alto 8,8 | 9,8% |
| 8 sept 2026 | Link Following | Windows | Alto 7,8 | 0,4% |
| 8 sept 2026 | Heap-Based Buffer Overflow | Windows | Alto 7,8 | 0,4% |
| 20 may 2026 | Buffer Overflow | Windows | Crítica 9,8 | 99% |
| 28 abr 2026 | Protection Mechanism Failure | Windows | Media 4,3 | 71% |
| 13 abr 2026 | Out-of-Bounds Read | Windows | Alto 7,8 | 12% |
| 13 abr 2026 | Link Following | Windows | Alto 7,8 | 4,6% |
| 17 feb 2026 | Microsoft Windows Video ActiveX Control Remote Code Execution | Windows | Alto 8,8 | 77% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.