Google researcher Forshaw found and talked about privilege escalation bug in Windows.
It is unclear whether the earlier versions, Windows 7, specifically vulnerable.
Microsoft is working to release a security update to address the issue of privilege height is important to note that for a potential attacker to potentially use the system, they will be in the first place.
Forshaw said that "It is a mistake to be disclosure period of 90 days. If 90 days pass without a widely available patch, the error report automatically become visible to the public."
Views:
Loverock.Davidson
Very irresponsible of Google and its employees. Its not the first time something like this has happened with them. Not much of an issue if you need access to a local account since most machines are on the network. The other thing is if you have the computer in front of you then you can pretty much get any data you want from it.
Anonymous
"The database has already one worried comment saying that automatically revealing a vulnerability just like that might be a bad idea."
Really? They had 90 days to fix this. That is plenty of time.
Leather Rope
Google at a higher level should have contacted Microsoft at a higher level before disclosing the vulnerability regardless of the 90-day clock. Obviously someone lower down the food chain at Microsoft dropped the ball.
