Forum - Computer security: vulnerabilities and exploits database

[EN] securityvulns.ru
no-pyccku

HTML help privilege escalation
updated since 24.10.2003
Published: 12.01.2004
Source: FULL-DISCLOSURE
SecurityVulns ID: 3201
Type: library
Level: 5/10
Description: HtmlHelp() call doesn't drop system privileges.

Affected: MICROSOFT : Windows 2000 Server
MICROSOFT : Windows XP
MICROSOFT : Windows 2003 Server
MICROSOFT : Windows 2000 Profiessional
SYMANTEC : Norton Internet Security 2004

Original document Kevin Finisterre, SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM (12.01.2004)

Brett Moore, [Full-Disclosure] HTML Help API - Privilege Escalation (24.10.2003)

Discuss: Read or add your comments to this news (0 comments)

Show		Threads
		Messages


Login:*		(Register)
Password:*
(private)	To:
(reply)	Subject:*
Text:

Main Forum (Eng) General security questions not appropriate for another forums.	3proxy Forum (Eng) All 3proxy question must be posted to this forum.	Bugs, Vulnerabilities, PoCs and Exploits (Eng) All vulnerability related questions, vulnerability digging and exploit creation.	Windows programming and administration (Eng) Administering Windows and application development.	Unix programming and administation (Eng) Administering Unix and application development.	Test forum Please post all test messages here. All test messages from different forums will be deteted.
Main Forum (Rus)	3proxy Forum (Rus)	Bugs, Vulnerabilities, PoCs and Exploits (Rus)	Windows programming and administration (Rus)	Unix programming and administation (Rus)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin