CISA KEV 정보
| 취약점명 | Microsoft Windows Shell (.lnk) Remote Code Execution Vulnerability |
|---|---|
| 설명 | Windows Shell in multiple versions of Microsoft Windows allows local users or remote attackers to execute arbitrary code via a crafted .LNK file |
| 조치사항 | Apply updates per vendor instructions. |
| 랜섬웨어 캠페인 악용 | Unknown |
| 등록일 (KEV) | 2022-02-10 |
| 조치 기한 | 2022-08-10 |
| 추가 참고 | https://nvd.nist.gov/vuln/detail/CVE-2017-8464 |
NVD 상세 정보
CVSS v3.1: 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HCVSS v2.0: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C설명: Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via a crafted .LNK file, which is not properly handled during icon display in Windows Explorer or any other application that parses the icon of the shortcut. aka "LNK Remote Code Execution Vulnerability."
참조
- http://www.securityfocus.com/bid/98818 [Third Party Advisory, VDB Entry]
- http://www.securitytracker.com/id/1038671 [Third Party Advisory, VDB Entry]
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464 [Patch, Vendor Advisory]
- https://www.exploit-db.com/exploits/42382/ [Exploit, Third Party Advisory, VDB Entry]
- https://www.exploit-db.com/exploits/42429/ [Exploit, Third Party Advisory, VDB Entry]
- http://www.securityfocus.com/bid/98818 [Third Party Advisory, VDB Entry]
- http://www.securitytracker.com/id/1038671 [Third Party Advisory, VDB Entry]
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8464 [Patch, Vendor Advisory]
- https://www.exploit-db.com/exploits/42382/ [Exploit, Third Party Advisory, VDB Entry]
- https://www.exploit-db.com/exploits/42429/ [Exploit, Third Party Advisory, VDB Entry]
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-8464
This product uses the NVD API but is not endorsed or certified by the NVD.