A recent white paper suggesting that an architectural flaw exists in Windows has generated interest in the press and on security mailing lists. While some of the report's findings are correct, its core assertion – that there is an architectural flaw in Windows – is inaccurate. The Microsoft Security Response Center has thoroughly investigated the report's claims, and we'd like to provide our customers information about our findings and our planned future steps.
The white paper details a type of attack that the author has termed a "shatter attack." Its central premise is that if a highly privileged service runs in the interactive desktop, it would be possible for the user to make use of its privileges. (The interactive desktop is an architectural construct in Windows, in which all services that interact directly with the user execute). This could enable a user to gain privileges on the system – in the most extreme case, giving him or her complete control over the system
|