MS15-085 Vulnerability in Mount Manager Could Allow Elevation of Privilege (opens in new tab)

(technet.microsoft.com)

1 pointsdnlongen10y ago1 comments

1 comments

So, plugging in a malicious USB storage device can not only execute malicious code, but can do it with elevated privileges.

Can it be done on a locked PC or must a user be actively logged in? I presume the former, as I don't believe the mounting process requires the PC to be unlocked.

j / k navigate · click thread line to collapse

1 comments

dnlongenOP10y ago

So, plugging in a malicious USB storage device can not only execute malicious code, but can do it with elevated privileges.

Can it be done on a locked PC or must a user be actively logged in? I presume the former, as I don't believe the mounting process requires the PC to be unlocked.

j / k navigate · click thread line to collapse