A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the the Internet Connection Signup Wizard loading libraries in an insecure manner. This can be exploited to load arbitrary libraries by tricking a user into e.g. opening a .ins or .isp file located on a remote WebDAV or SMB share.

Successful exploitation allows execution of arbitrary code.

Solution
Apply the patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits Muhaimin Dzulfakar, NGS Software.

Original Advisory
MS10-097 (KB2443105).
http://www.microsoft.com/technet/security/bulletin/MS10-097.mspx

Other references
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers