user5454

10 ms·

1. 31.▲
   by user5454 9y ago

   Wow! Speaking of trust, unsigned installers [1]?!? [1] https://github.com/iotaledger/wallet/issues/1084
2. 32.▲
   by user5454 9y ago

   You're right. It is possible to write a file but not to list or access any other files. So it is a security bug. You could "fix" it yourself though, by using a privileged account and copy any DLLs loaded by the Skype up
3. 33.▲
   by user5454 9y ago

   From the disclosure ( http://seclists.org/fulldisclosure/2018/Feb/33 ): > An unprivileged (local) user who is able to place UXTheme.dll or any of the other DLLs loaded by the vulnerable executable in %System