Microsoft plans to release out-of-band update to patch critical Windows security vulnerability. Shortcut exploit is being exploited by specially crafted shortcut files that point to malicious code and trick Windows into executing it without user interaction. Malware exploiting the vulnerability have included Stuxnet, Chymin and Dulkis, Zbot, and most recently Sality. The patch does not work on Windows XP SP2 and earlier, which is no longer supported by Microsoft. We would recommend that computer users apply the patch as soon as possible.”]
Source: https://nakedsecurity.sophos.com/2010/08/02/microsoft-readies-emergency-patch-shortcut-zeroday-flaw/