New Windows Zero Day Exploit - Nov 2010

[megamrkakashi]

you need the file called poc xD



[TheSpanishHamster]

the system cannot find the path specified?? what do i do??!!

[combossss]

ummm im trying to safe youre TIME go download a user acc hacker (CD)

and hack the admin acc in 2 min

[detoxcaso]

windóz rulez

[MrHamad4ever]

problem (not found after cd poe)

[q8mosfet]

fatal flaw

[speedstrine]

жедае, берегитесь

[artos0131]

I like it! Thanks for helping me hacking my sis PC. :D

[celegorm]

this is not a flaw in UAC, it's a problem with DEP. (DEP should stop this buffer overflow exploit).

[JunmaiShu]

Yeah, these are shady exploits indeed. The method you showed is what I call "Unsimple File Sharing" in XP Pro. I always use it to lock down permissions. You stated that UAC didn't stop it. I wonder how a HIPS or other behavior blocker would fare? I'd think it would stop it dead in it's tracks, but the problem with that is it forces the user to make a decision (allow/deny). And the average end user just clicks allow.

Great stuff as always. Way to keep people informed.

[labobo]

hehe lol

so much for windows 7 being "secure" ( microsofts said that remember ?)

[mike22490]

Windows will have an update out in no time...

[Ranguvar13]

@mike22490 Perhaps they will, but Microsoft has also allowed privilege escalation exploits to remain for months on end before.  But since it's not a free software OS like Linux, there's sadly not much one can do besides call Microsoft and try to make sure they are working on it :/ It's lucky this particular exploit has a workaround.

[itsazy]

is this the exploit released on a few well known exploit sites a few months ago, or a different one? AFAIK the one I'm talking about only worked on XP SP3.

[srikanth94]

more videos like this are much welcome...