Technical Cyber Security Alert TA09-020A – Disabling AutoRun on Microsoft Windows systems can help prevent the spread of malicious code. However, Microsoft’s guidelines for disabling AutoRun are not fully effective, which could be considered a vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/74183/TA09-020A.txt
Source: https://packetstormsecurity.com/files/74183/Technical-Cyber-Security-Alert-2009-20A.html