Researcher Reveals 2-Step Vista UAC Hack

Vikingod · May 17, 2007, 01:48 PM

Source: eWEEK / White Paper
_____________
A Web application developer has uncovered a two-step process (PDF) for exploiting Windows Vista's User Account Control, essentially by having a Trojan piggyback on what could be a legitimate download.

Robert Paveza, a senior Web application developer with Terralever, a Web-based marketing company based in Tempe, Ariz., published details of the vulnerability in a paper titled "User-Prompted Elevation of Unintended Code in Windows Vista."

May 17, 2007, 01:48 PM	#1
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,197 Rep Power: 112 System Specs	Researcher Reveals 2-Step Vista UAC Hack Source: eWEEK / White Paper _____________ A Web application developer has uncovered a two-step process (PDF) for exploiting Windows Vista's User Account Control, essentially by having a Trojan piggyback on what could be a legitimate download. Robert Paveza, a senior Web application developer with Terralever, a Web-based marketing company based in Tempe, Ariz., published details of the vulnerability in a paper titled "User-Prompted Elevation of Unintended Code in Windows Vista."