At this point, the attacker has only to attempt to save the current web page, which opens a File Explorer window where he needs to select a location to save the file. If the user has not already installed a default browser, Windows 10 will prompt the user to select an application to open the link, and if they select Internet Explorer, the browser will launch under the user's SYSTEM, as will the installer. This page contains a link to the full agreement on the SteelSeries website.
The first installer extracts additional installation files to the specified location, and then the extracted installer runs as well.Īt some point the second installer predictably presents the user with a license agreement. And it was the folder selection that caused the first vulnerability to be exploited. However, unlike Razer's Synapse software, the SteelSeries GG software installation initially occurs without giving users the option to select a folder to save files. As with Razer, this installer is run by a trusted SYSTEM user with administrator privileges. When a SteelSeries keyboard is plugged in, Windows attempts to install the SteelSeries GG app, which is used to control certain features of SteelSeries peripherals, such as RGB backlighting. Inspired by a discovery earlier this week, security researcher Lawrence Amer tried to find a similar vulnerability in SteelSeries peripherals on Windows 10. Now a similar story is happening with SteelSeries peripherals. Bug in Razer mouse software allows Windows administrator privilegesthat connecting a Razer mouse to a Windows 10 PC could easily allow a user to gain admin rights on that PC.
], 'description': '* Durable mechanical switches\r\n* OLED Smart Display\r\n* Aircraft grade aluminum frame', 'url': '/gaming-keyboards/apex-7?switch=red', 'main_item_sku': '64636', 'bestseller_factor': Decimal('1.Windows 10 users are being haunted by security vulnerabilities.
0 kommentar(er)
