4 ms·
Windows 10 has themes now too
by p410n3 6y ago
Windows 10 has themes now too
- HelloNurse 6y agoExcept that Windows 10 themes are a severe security/malware hazard, not a customization of harmless graphical elements.
- DaiPlusPlus 6y agoEh? Windows 10 themes are just wallpaper packs and a defined accent color. I assume you’re referring to UxStyle etc as used since Windows XP? That doesn’t involve loading any executable code (unless there’s an RCE vulnerability in the theme resource loader, I suppose) - patching the signature checks in UxTheme.dll isn’t that big a deal, imo.
- chungy 6y agoWindows XP themes are PE binaries. They totally run executable code. This might even be the main reason that the operating system as-is only allowed themes signed by Microsoft.
- userbinator 6y agoThey are PE binaries... that don't have any actual code, only resources. And there is a flag used with LoadLibraryEx, available since at least Win95, LOAD_LIBRARY_AS_DATAFILE, that tells the system to not attempt to execute code in the file (if present).