Win7Elevate v2 proof-of-concept: A more dramatic video

The Camtasia Studio video content presented here requires JavaScript to be enabled and the latest version of the Macromedia Flash Player. If you are you using a browser with JavaScript disabled please enable it now. Otherwise, please update your version of the free Flash Player by downloading here.

Slight correction: It says "all bundled Microsoft apps" at the end but that isn't true. There are some apps which don't as they aren't signed with the MS certificate. (e.g. Internet Explorer isn't a valid target.) I'll update the video when I get a chance.

See Also:

(Text) Windows 7 UAC whitelist: Code-injection Vulnerability
(Video) Original proof-of-concept which just copied a file: Mirror 1; Mirror 2
(Video) Second proof-of-concept: Video demonstration of Win 7 Beta UAC flaws and design: Mirror 1; Mirror 2
(YOU ARE HERE) Second proof-of-concept: A more dramatic example of a machine being hosed: Mirror 1; Mirror 2

I'll make the page look prettier when I get a moment. :-)

NOTE: THIS IS NOT THE SAME AS THE TWO ISSUES MICROSOFT SAID THEY'D FIX A WEEK AGO! STOP SAYING THIS HAS ALREADY BEEN ADDRESSED/FIXED BECAUSE IT HASN'T!