[Full-Disclosure] Internet Explorer (BAN IT !!!)
elvi52001 at yahoo.com
Thu Oct 9 11:31:15 BST 2003
i confirm that an unprivileged user is safe from this exploit. and i agree with you : too many people are running their Windows with Full Privileges :/
Peter - System Administrator
Irwan Hadi <irwanhadi at phxby.com> wrote:
On Thu, Oct 09, 2003 at 07:54:08AM +1000, gregh wrote:
> ----- Original Message -----
> From: "Stephen"
> Sent: Thursday, October 09, 2003 5:19 AM
> Subject: [Full-Disclosure] Internet Explorer (BAN IT !!!)
> > It becomes really dangerous to use IE ...
> > http://www.k-otik.com/WMPLAYER-TEST/
> > God bless Mozilla
> > http://www.mozilla.org/
> Your test didn't work on my IESP1 under XP with all patches excepting
> 811394. Absolutely no effect on WMP. My original WMP remains and works.
It depends whether you were logging as a privileged user or not.
If not, then your browser can't delete the wmplayer.exe file, because
the only user that can change/delete the wmplayer.exe file is privileged
C:\PROGRA~1\Windows Media Player>cacls wmplayer.exe
C:\PROGRA~1\Windows Media Player\wmplayer.exe BUILTIN\Users:R
C:\PROGRA~1\Windows Media Player>
The problem is just too many people are running their Windows with
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
-------------- next part --------------
An HTML attachment was scrubbed...
Full-Disclosure is hosted and sponsored by Secunia.