3 ms·
The above poster means that the exploit does not involve penetration via networking (remote exploit.) Only once 'local access' has been obtained (through maybe
by goldenkey 12y ago
The above poster means that the exploit does not involve penetration via networking (remote exploit.) Only once 'local access' has been obtained (through maybe a remote exploit) can this privilege escalation be used.
Meaning instead of doing things with your user account, they can instead hijack your whole system. A keylogger on windows, for instance, does not need ring0 to function. The difference isn't really that large on a personal single-user windows setup. You're pretty screwed even if they don't manage to get ring0.
- spacemanmatt 12y agoTo the extent that "local-only" is a mitigating factor, it shouldn't be. Real intruders are likely to layer their attack; a network exploit to get in, maybe a local-only privilege escalation to get deeper. They aren't picky.
- goldenkey 12y agoIt's a huge factor to a personal computer user. This exploit means almost nothing to those users because just having their single account jacked via a remote exploit is screwed enough. Privilege escalation is diddly squat. If we are talking about a corporate user, then it means a lot more.
- comex 12y agoThese days, having the IE renderer process running in the "protected mode" sandbox jacked is theoretically not "screwed enough"; I think this vulnerability would allow escaping from that sandbox. Correct me if I'm wrong, as I don't use Windows.
- goldenkey 12y agoYou might be right, I don't know much about the sandboxing. After a quick Google search, it seems like the details are sparse.