http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/ Not your usual Microsoft enthusiast blog. Tue, 16 Mar 2010 09:30:15 +0000 http://wordpress.org/?v=2.9.2 hourly 1 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-6436 Second Exploit Surfaces for Windows 7 UAC | M5Forum Technology Daily Wed, 03 Mar 2010 22:38:18 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-6436 [...] rundll32 is used to load a library and call a specific function with parameters, malware could then exploit this by using a proxy application to: invoke rundll32.exe, with the payload library as a parameter [...] [...] rundll32 is used to load a library and call a specific function with parameters, malware could then exploit this by using a proxy application to: invoke rundll32.exe, with the payload library as a parameter [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-6042 ы Sun, 17 Jan 2010 09:33:51 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-6042 so why auto-elevating control panel applets? imho this is unnecessary. I think I can stand pressing the "Ok" button in elevation window once or twice a week. so why auto-elevating control panel applets? imho this is unnecessary.
I think I can stand pressing the “Ok” button in elevation window once or twice a week.

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-5943 Windows 7 UAC whitelist: Code-injection Issue (and more) « Jasper Blog Tue, 05 Jan 2010 14:34:21 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-5943 [...] Rafael’s Within Windows: Windows 7 auto-elevation mistakes lets malware elevate freely, easily [...] [...] Rafael’s Within Windows: Windows 7 auto-elevation mistakes lets malware elevate freely, easily [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-5601 Airport Parking Sydney Tue, 08 Dec 2009 23:25:34 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-5601 Ms has made another careless mistake and running rundll32 again &&& not learning from vista is beyond me. Ms has made another careless mistake and running rundll32 again &&& not learning from vista is beyond me.

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-4341 Pearl Tech » Blog Archive Mon, 27 Jul 2009 15:55:28 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-4341 [...] in the week, independent researchers Rafael Rivera and Long Zheng described an exploit that could turn off the UAC prompt, which typically notifies [...] [...] in the week, independent researchers Rafael Rivera and Long Zheng described an exploit that could turn off the UAC prompt, which typically notifies [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-3734 Why upgrade to Vista when Windows 7 will be here soon? | OS Attack Thu, 28 May 2009 14:43:23 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-3734 [...] change with UAC in Windows 7 that essentially makes it less secure than Windows Vista. Rafael of Within Windows then posted about applications that have been White Listed and are automatically elevated to the [...] [...] change with UAC in Windows 7 that essentially makes it less secure than Windows Vista. Rafael of Within Windows then posted about applications that have been White Listed and are automatically elevated to the [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-3629 бaкинeц Mon, 18 May 2009 12:55:43 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-3629 Глубокоуважаемые, а нельзя оставлять комментарии по теме, а не разную глупость типа Автор молодец и т.д. Глубокоуважаемые, а нельзя оставлять комментарии по теме, а не разную глупость типа Автор молодец и т.д.

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-3570 Tutto quello che c’è da sapere su Windows 7 « Guiodic Blog Mon, 11 May 2009 10:02:23 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-3570 [...] In realtà non c’è bisogno che il programma venga direttamente infettato. E’ possibile realizzare semplicemente un malware che esegue uno di questi programmi e assume i privilegi di amministratore [...] [...] In realtà non c’è bisogno che il programma venga direttamente infettato. E’ possibile realizzare semplicemente un malware che esegue uno di questi programmi e assume i privilegi di amministratore [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-3560 Software Source Update » Blog Archive » Windows 7 silently elevates malware access Sun, 10 May 2009 02:29:03 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-3560 [...] Rafael Rivera Jr. has released proof-of-concept code that demonstrates how unauthorized third-party software can elevate its privileges and install [...] [...] Rafael Rivera Jr. has released proof-of-concept code that demonstrates how unauthorized third-party software can elevate its privileges and install [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-2583 George Wed, 11 Mar 2009 06:07:46 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2583 This is one of the strangest proof of concept flaws I've ever seen. I totally understand how injecting a dll into a white listed app could exploit this. Would it not be better for the functions requiring admin privilledges to check if the invoker is white listed and if not, then prompt? That seems like an easier option. This is one of the strangest proof of concept flaws I’ve ever seen. I totally understand how injecting a dll into a white listed app could exploit this. Would it not be better for the functions requiring admin privilledges to check if the invoker is white listed and if not, then prompt? That seems like an easier option.

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-2574 List of Windows 7 (beta build 7000) auto-elevated binaries - 【windows7 Home】 Fri, 06 Mar 2009 12:40:40 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2574 [...] my last post regarding Windows 7’s new “auto-elevate” flag (and potential issues with such a system), I mentioned compiling a list of all the flagged [...] [...] my last post regarding Windows 7’s new “auto-elevate” flag (and potential issues with such a system), I mentioned compiling a list of all the flagged [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-2527 blogger » Blog Archive » Microsoft changes Windows 7 UAC due to new exploit code Wed, 25 Feb 2009 23:42:47 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2527 [...] will … automatically elevate the process to High Mandatory Level, executing your payload wearing an administrative hat," Rivera said in a post to his blog early this [...] [...] will … automatically elevate the process to High Mandatory Level, executing your payload wearing an administrative hat," Rivera said in a post to his blog early this [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-2512 Second Windows 7 beta UAC security flaw: malware can silently self-elevate with default UAC policy | Window7s Fri, 20 Feb 2009 20:48:39 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2512 [...] Without going into too much detail, as you already may know from the previous postings, Windows 7 has the ability automatically elevates Microsoft-signed applications and code which specifies “auto elevation” to mitigate the number of UAC prompts. Rafael Rivera has more details how this works. [...] [...] Without going into too much detail, as you already may know from the previous postings, Windows 7 has the ability automatically elevates Microsoft-signed applications and code which specifies “auto elevation” to mitigate the number of UAC prompts. Rafael Rivera has more details how this works. [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-2/#comment-2509 Second Windows 7 beta UAC security flaw: malware can silently self-elevate with default UAC policy « Window7s Fri, 20 Feb 2009 19:23:11 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2509 [...] Without going into too much detail, as you already may know from the previous postings, Windows 7 has the ability automatically elevates Microsoft-signed applications and code which specifies “auto elevation” to mitigate the number of UAC prompts. Rafael Rivera has more details how this works. [...] [...] Without going into too much detail, as you already may know from the previous postings, Windows 7 has the ability automatically elevates Microsoft-signed applications and code which specifies “auto elevation” to mitigate the number of UAC prompts. Rafael Rivera has more details how this works. [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2474 Mac OS X Dialog Box Spoofing—Believe Me, I’m System Preferences Tue, 10 Feb 2009 17:33:23 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2474 [...] While analyzing the recent OSX.Iservice.B threat I noticed some interesting API calls that were dealing directly with the Mac OS X authorization mechanism. There are plenty of interesting analyses and discussion about Windows UAC, both regarding Vista (Ollie’s post) or the recent Windows 7 UAC. [...] [...] While analyzing the recent OSX.Iservice.B threat I noticed some interesting API calls that were dealing directly with the Mac OS X authorization mechanism. There are plenty of interesting analyses and discussion about Windows UAC, both regarding Vista (Ollie’s post) or the recent Windows 7 UAC. [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2470 Microsoft responds to UAC criticism in Windows 7 and fixes design flaws | IT Knowledge Hub Mon, 09 Feb 2009 15:28:27 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2470 [...] in Windows 7 RC, you will always be prompted when the UAC level is changed to prevent any malicious scripts from silently changing your UAC level and taking over your computer. For everybody using Windows 7 [...] [...] in Windows 7 RC, you will always be prompted when the UAC level is changed to prevent any malicious scripts from silently changing your UAC level and taking over your computer. For everybody using Windows 7 [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2461 Microsoft responds to UAC criticism in Windows 7 and fixes design flaws | Windows 7 Center Sun, 08 Feb 2009 18:12:01 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2461 [...] in Windows 7 RC, you will always be prompted when the UAC level is changed to prevent any malicious scripts from silently changing your UAC level and taking over your computer. It’s a good sign that [...] [...] in Windows 7 RC, you will always be prompted when the UAC level is changed to prevent any malicious scripts from silently changing your UAC level and taking over your computer. It’s a good sign that [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2456 4sysops - Windows 7 UAC vulnerabilities Fri, 06 Feb 2009 23:15:25 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2456 [...] Rafael Rivera again wrote a proof-of-concept. He uses a proxy application, which he called Catapult.exe, that launches Cake.dll. With the default UAC setting, Windows will run Cake.dll with admin privileges without issuing a prompt. You can verify that if you set the UAC setting to “Always notify me”. If you start Catapult.exe with this configuration, you will get a UAC prompt. [...] [...] Rafael Rivera again wrote a proof-of-concept. He uses a proxy application, which he called Catapult.exe, that launches Cake.dll. With the default UAC setting, Windows will run Cake.dll with admin privileges without issuing a prompt. You can verify that if you set the UAC setting to “Always notify me”. If you start Catapult.exe with this configuration, you will get a UAC prompt. [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2455 Il web cambia la decisione di Microsoft sull’UAC di Windows 7 | Windows 7 Blog Fri, 06 Feb 2009 22:52:00 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2455 [...] sul lavoro di Rafael Rivera Long Zheng ha dimostrato che la combinazione di elevation automatica di software [...] [...] sul lavoro di Rafael Rivera Long Zheng ha dimostrato che la combinazione di elevation automatica di software [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2442 Latest Second Windows 7 beta UAC security flaw: malware can silently self-elevate with default UAC policy | Gadget on Gatzet Info Fri, 06 Feb 2009 05:54:49 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2442 [...] Without going into too much detail, as you already may know from the previous postings, Windows 7 has the ability automatically elevates Microsoft-signed applications and code which specifies “auto elevation” to mitigate the number of UAC prompts. Rafael Rivera has more details how this works. [...] [...] Without going into too much detail, as you already may know from the previous postings, Windows 7 has the ability automatically elevates Microsoft-signed applications and code which specifies “auto elevation” to mitigate the number of UAC prompts. Rafael Rivera has more details how this works. [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2437 Xtreem0 Thu, 05 Feb 2009 23:57:58 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2437 http://blogs.zdnet.com/microsoft/?p=1914 there is an update where apparently they say they have fixed it. Mined you we may not see the fix untill final releace http://blogs.zdnet.com/microsoft/?p=1914 there is an update where apparently they say they have fixed it. Mined you we may not see the fix untill final releace

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2433 UAC in Windows 7 is like a screen door on a submarine | OS Attack Thu, 05 Feb 2009 20:00:45 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2433 [...] posting their original findings Rafael Ravera has posted a follow up on his site showing how malware could use rundll32.exe or any other [...] [...] posting their original findings Rafael Ravera has posted a follow up on his site showing how malware could use rundll32.exe or any other [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2431 Boycott Novell » Turkey, France, United Stated Under Attack by Microsoft Windows Insecurities Thu, 05 Feb 2009 17:40:30 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2431 [...] status (beta) that wrongly indicates maturity, the operating system is not secure and it keeps looking worse as people study it more closely. As you probably know by now, Windows 7 introduces some new in-between modes for User Account [...] [...] status (beta) that wrongly indicates maturity, the operating system is not secure and it keeps looking worse as people study it more closely. As you probably know by now, Windows 7 introduces some new in-between modes for User Account [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2428 » Microsoft: UAC security setting not changing (for now) | All about Microsoft | ZDNet.com Thu, 05 Feb 2009 15:48:45 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2428 [...] the entire UAC security-setting controversy, I’ll just point to a few posts about it from Within Windows, Istartedsomething, and yours truly. [...] [...] the entire UAC security-setting controversy, I’ll just point to a few posts about it from Within Windows, Istartedsomething, and yours truly. [...]

]]> http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-lets-malware-elevate-freely-easily/comment-page-1/#comment-2427 Nicky Thu, 05 Feb 2009 13:21:01 +0000 http://www.withinwindows.com/2009/02/04/windows-7-auto-elevation-mistake-let-malware-elevate-freely-easily/#comment-2427 Although I'm currently at work and havent yet tried hack created by the author, I will try it when I get home and post my results. Although I’m currently at work and havent yet tried hack created by the author, I will try it when I get home and post my results.

]]>