Re: White paper: Exploiting the Win32 API.

From: Chris Calabrese (chris_calabreseat_private)
Date: Wed Aug 07 2002 - 06:38:13 PDT

  • Next message: Dave Aitel: "MS SQL Server Hello Overflow NASL script" 

    So let me get this straight.

Allowing unpriveleged processes to send control messages to priveleged
processes is not a flaw in the Win32 API because there is a mechanism
for applications to protect themselves from this type of attack
(alternate Windows Stations/Desktops).

But the mechanism effectively prevents the priveleged processes from
providing a GUI because the user won't be able to actually see the
alternate Windows Stations/Desktops without some kind of Station
switching tool, and/or extra training in how to do this.

So, the result is that no applications actually use this mechanism.

What part of "this is broken" doesn't make sense?

__________________________________________________
Do You Yahoo!?
Yahoo! Health - Feel better, live better
http://health.yahoo.com

    This archive was generated by hypermail 2b30 : Wed Aug 07 2002 - 08:59:31 PDT