[Full-Disclosure] USB Auto run function
Aditya, ALD [ Aditya Lalit Deshmukh ]
aditya.deshmukh at online.gateway.technolabs.net
Fri Jun 18 09:36:44 BST 2004
> I have been interested in a potential exploit that may or may not be an
> issue, I read lately that a potential malicious file could enter a system
> via a USB Memory stick with a structured autorun.pif , and this file would
> operate even if the screen lock is activated .
this is true only for cdroms where the autorun has been enabled, winxp does scan for the removable drives but does not run the program based on the autorun but the type of files on the reemovable drive
-aditya
ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ
éb½êÞvë"žaxZÞx÷«²‰Ú”Gb¶*'¡óŠ[kj¯ðÃæj)mªÿr‰ÿ
Full-Disclosure is hosted and sponsored by Secunia.