Google researcher publishes details of UNpatched Win 8.1 Vulnerability

[ky331]

A Google security researcher... has taken the bold step to publish a security vulnerability in Windows 8.1 that is still exploitable... [making] the defense that he/she waited 90 days after first publication of the vulnerability before letting the world know how to exploit it, and so far, Microsoft has not patched the issue.

The post was made on Google's security research site where it discloses the vulnerability and how to execute the flaw. The vulnerability allows for an elevation of privilege in ahcache.sys/NtApphelpCacheControl and there is a demo application that can launch calc.exe using the method.

http://www.neowin.net/news/google-researcher-publishes-unpatched-windows-81-security-vulnerability

[siljaline]

With Tweets from ZDNET's Larry Seltzer.