eEye Digital Security has just announced the discovery of a new security error in Windows Vista. This error allows ordinary users to raise their account to the same account of the administrator.
Marc Maiffret, co-founder of eEye Digital Security, said the flaw is in the Vista operating system itself, not part of a component that has been used for many applications such as Windows Defender.
' A key security feature in Vista is that ordinary users have less access. 'Mr. Maiffret said:' They have less rights than when using Windows XP. When ordinary users run the operating system, they have a normal account, but with this error, you can elevate your rights to the same level as the system manager. Anyone can do what they want on the system . '
eEye Digital Security has classified this error in a group with moderate risk because remote operators cannot take advantage of it to gain control. However, Maiffret said if the hacker combined the use of viruses and exploited a vulnerability in the remote control feature, 'the problem would be much more serious.'
' Viruses are very popular and there are many other vulnerabilities that you can combine. In fact, this error is very dangerous because there are so many other things you can do to combine it, making it more dangerous. However, it alone is only average . ' Mr. Maiffret said.
Microsoft spokesman said the company's experts are investigating and will provide necessary instructions to customers.
Hoang Minh
Detect new Vista security flaws
eEye Digital Security has just announced the discovery of a new security error in Windows Vista. This error allows ordinary users to raise their account to the same account of the administrator.
Keep exploring
More in Computer scienceBrowse the category
Next reads
Continue reading
Computer science
Why can't Cốc Cốc download videos to my computer?
Computer science
How to see the path of storm Ragasa updated every minute
Computer science
Top 10 most powerful supercomputers in the world
Computer science
Stop using your phone as a flashlight
Computer science