MS15-085 Vulnerability in Mount Manager Could Allow Elevation of Privilege(technet.microsoft.com)

1 pointsby dnlongen11 ปีที่แล้ว1 comments

technet.microsoft.com

MS15-085 Vulnerability in Mount Manager Could Allow Elevation of Privilege

https://technet.microsoft.com/en-us/library/security/MS15-085

1 comments

dnlongen11 ปีที่แล้ว

So, plugging in a malicious USB storage device can not only execute malicious code, but can do it with elevated privileges.

Can it be done on a locked PC or must a user be actively logged in? I presume the former, as I don't believe the mounting process requires the PC to be unlocked.