Slashdot Mirror

← Back to Stories (view on slashdot.org)

Windows Vulnerable To 'Token Kidnapping' Attacks

Posted by timothy on from the token-of-my-affection dept.

cuppa+tea writes "More than a year after Microsoft issued a patch to cover privilege escalation issues that could lead to complete system takeover, a security researcher plans to use the Black Hat conference spotlight to expose new design mistakes and security issues that can be exploited to elevate privileges on all Windows versions, including the brand new Windows 2008 R2 and Windows 7."

2 of 126 comments (clear)

  1. Re:About Software by iammani · · Score: 4, Interesting

    Really? Can you find a bug in this...

    #include <stdio.h>
    int main()
    {
            printf("hello, world");
            return 0;
    }

  2. Re:About Software by greg_barton · · Score: 4, Interesting

    Considering I once performed a security audit and found that the lead developer for the client had rewritten printf so it had damaging side effects...yes...