SecuritySpace - CVE-2017-8464

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2017-8464

Description: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability."

Test IDs: 1.3.6.1.4.1.25623.1.0.811159

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2017-8464
BugTraq ID: 98818
http://www.securityfocus.com/bid/98818
https://www.exploit-db.com/exploits/42382/
https://www.exploit-db.com/exploits/42429/
http://www.securitytracker.com/id/1038671

CVE ID:	CVE-2017-8464
Description:	Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability."
Test IDs:	1.3.6.1.4.1.25623.1.0.811159
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2017-8464 BugTraq ID: 98818 http://www.securityfocus.com/bid/98818 https://www.exploit-db.com/exploits/42382/ https://www.exploit-db.com/exploits/42429/ http://www.securitytracker.com/id/1038671