Zero Day Windows LNK Exploit

UPDATE: Microsoft have released a patch to fix the vulnerability here. Remove any temporary workaround provided by antivirus companies before installing it. Thanks to ajbritton and Arthur for the heads up.

Sophos have released a tool to block the CPLINK exploit present in all versions of the Windows Operating Ssytem from XP onwards. The exploit utilises compromised .LNK files (AKA shortcuts) to run potentially malicious code on a system by merely viewing the icon of the shortcut in a folder, network share or WebDAV folder.

The Sophos tool is available here but no patch is currently available from Microsoft to close the exploit.

Further information is available from MS Security Advisory 2286198.