3 ms·

There's a long report linked by the source here: https://www.trendmicro.com/en_us/research/25/c/windows-shortcut-zero-day-exploit.html https://www.trendmicro.co

There's a long report linked by the source here: https://www.trendmicro.com/en_us/research/25/c/windows-shortcut-zero-day-exploit.html https://www.trendmicro.com/en_us/research/25/c/windows-short... Lots and lots of words, but tl;dr seems to be that it's just the .lnk equivalent of someone adding `logout` to your .bashrc, prepending it with a couple hundred spaces, and hoping your favorite editor doesn't have line wrap turned on. Except here, it's a fixed-width one-line GUI textbox, so there's no vertical space for line wrap, and the "hidden" commands are not a prank. If the overall info on exploitation is accurate, it's quite surprising just how far one can go with most trivial of tricks.

charcircuit 2y ago
It's more like you downloaded a .desktop file from someone untrusted.
do_not_redeem 2y ago
So you can change the icon of a shortcut and rename it to something misleading? That's an awfully weak "exploit". No wonder it was given a "ZDI-CAN" number (whatever that is) instead of an actual CVE.
- ziddoap 2y ago
  >No wonder it was given a "ZDI-CAN" number (whatever that is) instead of an actual CVE. ZDI = Zero Day Initiative. https://www.zerodayinitiative.com/advisories/published/ https://www.zerodayinitiative.com/advisories/published/ I don't particularily agree with some of their philosophy, but they are smart folks and valuable to monitor alongside CVE. It's not like it's some backalley discount version of CVE. They've been around for 20 years, after all.
  - do_not_redeem 2y ago
    Fair, I learned something, thanks for responding in good faith.