LinkIconShim

LinkIconShim it is a simple shell extension that inserts itself in front of the original buggy .lnk file handler and checks the incoming files.

If a link to control panel item is found (the exploitable one), the path to the cpl is checked, and only icons from cpl applets located in system directory are extracted. This is very similar to method used in official Microsoft patch released for supported systems.