HTML help privilege escalation updated since 24.10.2003
Published:		12.01.2004
Source:		FULL-DISCLOSURE
SecurityVulns ID:		3201
Type:		library
Level:		5/10
Description:		HtmlHelp() call doesn't drop system privileges.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows 2000 Profiessional
		SYMANTEC : Norton Internet Security 2004

Original document		Kevin Finisterre, SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM (12.01.2004)
		Brett Moore, [Full-Disclosure] HTML Help API - Privilege Escalation (24.10.2003)

Discuss:

Read or add your comments to this news (0 comments)