[katakana]

hello i'm new, anyone here know about MS10-046 exploit?

[Scripting]

Yes, I know. It exploits a vulnerability in the handling of Windows Shortcut files (.LNK) that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path.

[katakana]

Quote:

Originally Posted by Scripting

Yes, I know. It exploits a vulnerability in the handling of Windows Shortcut files (.LNK) that contain an icon resource pointing to a malicious DLL. This module creates a WebDAV service that can be used to run an arbitrary payload when accessed as a UNC path.

so it's allow the hacker to modify the service, am i right?

[Scripting]

Yes, exactly.

[katakana]

how to check or scan this vulnerability and how it's work?

[Scripting]

I'm sure you can use Metasploit framework to exploit it. But if you want to get some info about this vulnerability, i'm sure you will find tons on google, try to search.