Ureader.com  
Microsoft software help and Community
   home   |   control panel login   |   archive   |  
 
Vista
admin account
file management
games
general
hardware assessment
hardware devices
installation
mail
multimedia
networking sharing
performance
print_fax_scan
security
  
 
date: Tue, 1 Jul 2008 23:04:00 -0700,    group: microsoft.public.windows.vista.security        back       


Break into a locked Windows via flash screen savers   
Hi I'm xxp9 at hotmail dot com. I found that one can easily break into a 
locked Windows XP when a screen saver based on Adobe Flash Player is on. 
Click your right mouse button you'll get the context menu of the flash 
player. Then click "about Adobe Flash Player..." from the menu you'll get an 
IE!

Then you can follow the famous "IME security hole". Run 
"c:\windows\system32\cmd.exe" from
IE(open another IE window from "File"->"new window" if you failed to run 
cmd.exe from the first one), input 

net user xxp /add * 
net localgroup administrators xxp /add 

to get the administrator's permission.

I also post in my blog, though, in Chinese, at xxp9 dot spaces dot live dot 
com



----------------
This post is a suggestion for Microsoft, and Microsoft responds to the 
suggestions with the most votes. To vote for this suggestion, click the "I 
Agree" button in the message pane. If you do not see the button, follow this 
link to open the suggestion in the Microsoft Web-based Newsreader and then 
click "I Agree" in the message pane.

http://windowshelp.microsoft.com/communities/newsgroups/en-us/default.mspx?mid=677cce8f-ce03-4636-ac3a-6ae4eb3f63db&dg=microsoft.public.windows.vista.security
date: Tue, 1 Jul 2008 23:04:00 -0700   author:   xxp9

Re: Break into a locked Windows via flash screen savers   
That's why I don't use a screen saver - just blank the screen.  :)

-- 
Richard G. Harper [MVP Shell/User]  rgharper@gmail.com
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/


"xxp9"  wrote in message 
news:677CCE8F-CE03-4636-AC3A-6AE4EB3F63DB@microsoft.com...
> Hi I'm xxp9 at hotmail dot com. I found that one can easily break into a
> locked Windows XP when a screen saver based on Adobe Flash Player is on.
> Click your right mouse button you'll get the context menu of the flash
> player. Then click "about Adobe Flash Player..." from the menu you'll get 
> an
> IE!
>
> Then you can follow the famous "IME security hole". Run
> "c:\windows\system32\cmd.exe" from
> IE(open another IE window from "File"->"new window" if you failed to run
> cmd.exe from the first one), input
>
> net user xxp /add *
> net localgroup administrators xxp /add
>
> to get the administrator's permission.
>
> I also post in my blog, though, in Chinese, at xxp9 dot spaces dot live 
> dot
> com
>
>
>
> ----------------
> This post is a suggestion for Microsoft, and Microsoft responds to the
> suggestions with the most votes. To vote for this suggestion, click the "I
> Agree" button in the message pane. If you do not see the button, follow 
> this
> link to open the suggestion in the Microsoft Web-based Newsreader and then
> click "I Agree" in the message pane.
>
> http://windowshelp.microsoft.com/communities/newsgroups/en-us/default.mspx?mid=677cce8f-ce03-4636-ac3a-6ae4eb3f63db&dg=microsoft.public.windows.vista.security
date: Wed, 2 Jul 2008 06:01:23 -0400   author:   Richard G. Harper

Re: Break into a locked Windows via flash screen savers   
I gotta change my screen saver. And remind me to change the combination on 
my luggage (12345). :)



-- 

Dustin Harper
dharper@vistarip.com
http://www.vistarip.com | Vista Resource & Information Page


"xxp9"  wrote in message 
news:677CCE8F-CE03-4636-AC3A-6AE4EB3F63DB@microsoft.com...
> Hi I'm xxp9 at hotmail dot com. I found that one can easily break into a
> locked Windows XP when a screen saver based on Adobe Flash Player is on.
> Click your right mouse button you'll get the context menu of the flash
> player. Then click "about Adobe Flash Player..." from the menu you'll get 
> an
> IE!
>
> Then you can follow the famous "IME security hole". Run
> "c:\windows\system32\cmd.exe" from
> IE(open another IE window from "File"->"new window" if you failed to run
> cmd.exe from the first one), input
>
> net user xxp /add *
> net localgroup administrators xxp /add
>
> to get the administrator's permission.
>
> I also post in my blog, though, in Chinese, at xxp9 dot spaces dot live 
> dot
> com
>
>
>
> ----------------
> This post is a suggestion for Microsoft, and Microsoft responds to the
> suggestions with the most votes. To vote for this suggestion, click the "I
> Agree" button in the message pane. If you do not see the button, follow 
> this
> link to open the suggestion in the Microsoft Web-based Newsreader and then
> click "I Agree" in the message pane.
>
> http://windowshelp.microsoft.com/communities/newsgroups/en-us/default.mspx?mid=677cce8f-ce03-4636-ac3a-6ae4eb3f63db&dg=microsoft.public.windows.vista.security
date: Wed, 2 Jul 2008 08:50:39 -0700   author:   Dustin Harper

Re: Break into a locked Windows via flash screen savers   
Hey!  I have the exact same combination on my luggage!  :-)

-- 
Richard G. Harper [MVP Shell/User]  rgharper@gmail.com
* NEW! Catch my blog ... http://msmvps.com/blogs/rgharper/
* PLEASE post all messages and replies in the newsgroups
* The Website - http://rgharper.mvps.org/


"Dustin Harper"  wrote in message 
news:705226EC-0A74-477F-921F-0488A269EEC9@microsoft.com...
>I gotta change my screen saver. And remind me to change the combination on 
>my luggage (12345). :)
date: Wed, 2 Jul 2008 17:59:58 -0400   author:   Richard G. Harper

Re: Break into a locked Windows via flash screen savers   
In message  xxp9
 wrote:

>Hi I'm xxp9 at hotmail dot com. I found that one can easily break into a 
>locked Windows XP when a screen saver based on Adobe Flash Player is on. 
>Click your right mouse button you'll get the context menu of the flash 
>player. Then click "about Adobe Flash Player..." from the menu you'll get an 
>IE!

Adobe's Flash being a security hole?  That isn't exactly news.
date: Wed, 02 Jul 2008 18:04:58 -0600   author:   DevilsPGD

RE: Break into a locked Windows via flash screen savers   
"xxp9" wrote:

> Hi I'm xxp9 at hotmail dot com. I found that one can easily break into a 
> locked Windows XP when a screen saver based on Adobe Flash Player is on. 
> Click your right mouse button you'll get the context menu of the flash 
> player. Then click "about Adobe Flash Player..." from the menu you'll get an 
> IE!
> 
> Then you can follow the famous "IME security hole". Run 
> "c:\windows\system32\cmd.exe" from
> IE(open another IE window from "File"->"new window" if you failed to run 
> cmd.exe from the first one), input 
> 
> net user xxp /add * 
> net localgroup administrators xxp /add 
> 
> to get the administrator's permission.
> 
> I also post in my blog, though, in Chinese, at xxp9 dot spaces dot live dot 
> com
> 
> 
> 
> ----------------
> This post is a suggestion for Microsoft, and Microsoft responds to the 
> suggestions with the most votes. To vote for this suggestion, click the "I 
> Agree" button in the message pane. If you do not see the button, follow this 
> link to open the suggestion in the Microsoft Web-based Newsreader and then 
> click "I Agree" in the message pane.
> 
> http://windowshelp.microsoft.com/communities/newsgroups/en-us/default.mspx?mid=677cce8f-ce03-4636-ac3a-6ae4eb3f63db&dg=microsoft.public.windows.vista.security
date: Tue, 8 Jul 2008 17:23:01 -0700   author:   Adobe Flash Player Adobe Flash

Re: Break into a locked Windows via flash screen savers   
And the same last name as the OP. Who knew ? <w>

MG

Richard G. Harper wrote:

> Hey!  I have the exact same combination on my luggage!  :-)
>
date: Wed, 09 Jul 2008 10:03:01 -0700   author:   MowGreen [MVP]

Google
 
Web ureader.com


    COPYRIGHT 2007, YARDI TECHNOLOGY LIMITED, ALL RIGHT RESERVE  |   contact us