Re: revelation, snitch, openPass...

Alisson,

Briefly, any window can touch any other window. Using the API, windows can talk to each other (including changing others' controls, like the password box).

There is a paper titled "Exploiting design flaws in the Win32 API for privilege escalation" which discusses some of these problems available at http://www.astalavista.com/library/basics/guides/Next-GenerationWin32exploit s.htm.

apl

• Original Message ----- From: <averas@larc.usp.br> To: <security-basics@securityfocus.com>; <secprog@securityfocus.com> Sent: Thursday, June 12, 2003 9:59 AM Subject: revelation, snitch, openPass...

> Hi folks,
Received on Thu Jun 12 13:28:21 2003