← CVE Radar
CVE-2010-2568Microsoft Windows Remote Code Execution Vulnerability
Windows Shell in Microsoft Windows XP SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 SP2 and R2, and Windows 7 allows local users or remote attackers to execute arbitrary code via a crafted (1) .LNK or (2) .PIF shortcut file, which is not properly handled during icon display in Windows Explorer, as demonstrated in the wild in July 2010, and originally reported for malware that leverages CVE-2010-2772 in Siemens WinCC SCADA systems.
7.8 HIGHEPSS 89.62%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| 9.3 | HIGH | 2.0NVD | AV:N/AC:M/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Oct 6, 2022
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2010-2568
- Status
- Analyzed
- Assigner (CNA)
- microsoft
- Published
- Jul 22, 2010
- Last modified
- 2026-06-16 23:20 UTC
- Weaknesses
Affected Products
From NVD CPE configurations.
microsoftwindows 70 version ranges
No version detail published.
microsoftwindows server 20030 version ranges
No version detail published.
microsoftwindows server 20081 version range
- r2
microsoftwindows vista0 version ranges
No version detail published.
microsoftwindows xp0 version ranges
No version detail published.
References
- isc.sans.edu http://isc.sans.edu/diary.html?storyid=9181
- isc.sans.edu http://isc.sans.edu/diary.html?storyid=9190
- krebsonsecurity.com http://krebsonsecurity.com/2010/07/experts-warn-of-new-windows-shortcut-flaw/
- secunia.com http://secunia.com/advisories/40647
- securitytracker.com http://securitytracker.com/id?1024216
- f-secure.com http://www.f-secure.com/weblog/archives/00001986.html
- f-secure.com http://www.f-secure.com/weblog/archives/new_rootkit_en.pdf
- kb.cert.org http://www.kb.cert.org/vuls/id/940193
- microsoft.com http://www.microsoft.com/technet/security/advisory/2286198.mspx
- securityfocus.com http://www.securityfocus.com/bid/41732
- us-cert.gov http://www.us-cert.gov/cas/techalerts/TA10-222A.html
- docs.microsoft.com https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-046
- oval.cisecurity.org https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11564
- geoffchappell.com https://www.geoffchappell.com/notes/security/stuxnet/ctrlfldr.htm
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-2568