Ring0VBA – Getting Ring0 Using a Word Document

Re:Ring0VBA – Getting Ring0 Using a Word Document by fazfq on Wednesday October 26, 2022 @07:17AM (#33342109)

You have to be a local administrator to load a driver.

[ Parent | on HN ]

Re:Ring0VBA – Getting Ring0 Using a Word Document by wongarsu on Wednesday October 26, 2022 @09:32AM (#33343434)

Even a "local admin to Ring0 without reboot"-exploit might have some uses in malware.

[ Parent | on HN ]

Re:Ring0VBA – Getting Ring0 Using a Word Document by fazfq on Wednesday October 26, 2022 @10:39AM (#33344408)

But that already exists. There are thousands of signed drivers; many around are bound to be exploitable. But it's not Windows' fault that you installed one.

The truth of the matter is that if you are local admin you can already ruin the system in many ways. Once you are admin the game is already over.

[ Parent | on HN ]

Re:Ring0VBA – Getting Ring0 Using a Word Document by Rygian on Wednesday October 26, 2022 @12:05PM (#33345744)

Imagine you're my clueless family relative and you end up installing one of those signed-yet-exploitable drivers.

Whose fault is it?

[ Parent | on HN ]

Re:Ring0VBA – Getting Ring0 Using a Word Document by fazfq on Wednesday October 26, 2022 @12:29PM (#33346062)

If I operate machinery or any kind of device that I'm clueless about and I screw up it definitely is my fault, yes.

[ Parent | on HN ]