Fails to protect against latest windows .lnk exploit vulnerability

Comodo Internet Security - CIS Resolved/Outdated Issues - CIS
1

CIS fails protect against latest windows .lnk exploit. Tested myself with the POC mentioned here.

http://ssj100.fullsubject.com/security-f7/vulnerability-in-windows-shell-could-allow-remote-code-execution-t187.htm

Too bad that version 5 beta fails too and there seems no way to intercept it.

2
3

He is not referring to link exploit at all, as no script is involved in this exploit.

4

I don’t think you need to worry about it. Microsoft is releasing a security patch for it on Monday Aug. 2

5

Yes too bad CIS failed to protect against this vulnerability. I know they have added a signature to the file but it seems D+ and the sandbox are ineffective against this vulnerability.

6

I know that but I wish CIS could have stopped it at day zero and I think they must add a way to intercept this vulnerability. Infact dll execution interception must be handled in some clever way.

7

Hi Aigle. I will stand corrected, but dosent Hitman pro version 108 have protection for this exploit?. As i have it installed, then does this not mean i can relax until either micro soft or Comodo get it sorted?.

Regards
Dave1234.

8

Of course I am not panic. Just wanted them to realize this issue.

9

Looks like MS transformed the issue into an non-issue. ;D

10

Not for XP though.

11

XP SP3. I’ve installed it yesterday at work. It doesn’t work as intended? ???

[attachment deleted by admin]

12

I thought MS did not released official patch for XP. Am I wrong?

13

I got the patch for XP SP3

I believe it is not available for SP2 or earlier unsupported OS.
Even though the vulnerability affects all MS OS’s.

Bad