銳傑科技股份有限公司

銳傑科技安全性通報
漏洞相關資訊
漏洞名稱	Windows Shell中的弱點可能會允許遠端執行程式碼 (2286198)
風險評估	重大 (Critical)
發佈日期	2010-07-16 (2010-08-03更新)
原廠文件編號	Microsoft Security Bulletin MS10-046
影響的作業系統及功能元件	l Windows XP Service Pack 3 l Windows XP Professional x64 Edition Service Pack 2 l Windows Server 2003 Service Pack 2 l Windows Server 2003 x64 Edition Service Pack 2 l Windows Server 2003 with SP2 for Itanium-based Systems l Windows Vista Service Pack 1 and Windows Vista Service Pack 2 l Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2 l Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2 l Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2 l Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2 l Windows 7 for 32-bit Systems l Windows 7 for x64-based Systems l Windows Server 2008 R2 for x64-based Systems l Windows Server 2008 R2 for Itanium-based Systems
需執行的安全性修正程式	作業系統	中文版	英文版
	Windows XP Service Pack 3
	Windows XP Professional x64 Edition Service Pack 2
	Windows Server 2003 Service Pack 2
	Windows Server 2003 x64 Edition Service Pack 2
	Windows Server 2003 with SP2 for Itanium-based Systems
	Windows Vista Service Pack 1 and Windows Vista Service Pack 2
	Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2
	Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2
	Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2
	Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
	Windows 7 for 32-bit Systems
	Windows 7 for x64-based Systems
	Windows Server 2008 R2 for x64-based Systems
	Windows Server 2008 R2 for Itanium-based Systems
描述與建議解決方案:
描述：這個安全性更新可解決Windows Shell公開揭露的漏洞。如果一個含有威脅的捷徑(lnk)圖示被顯示，該漏洞將會允許遠端程式碼執行。成功利用此一弱點可取得與本機使用者相同的權限。此安全性更新透過修改捷圖示顯示驗證方式，進而解決這些漏洞。
建議解決方案： 1. 建議各企業用戶應儘速執行此安全性弱點修正工作。 2. 確認防毒軟體病毒定義檔更新至最新。
相關參考文件
Microsoft	URL：http://www.microsoft.com/technet/security/bulletin/MS10-046.mspx
	URL：http://www.microsoft.com/technet/security/advisory/2286198.mspx
注意事項
一、安裝上述修正程式前，請務必先執行系統完整備份，或是先行在測試環境中測試，以避免執行完成後，造成系統運作無法正常運作。