A vulnerability has been identified that allows access to the lock.

[Детективное агентство ИКС-Инфо.]

A vulnerability has been identified that could allow access to a locked computer with Windows 7, 8 or Server 2008 R2 installed.
The team of the Internet resource Carnal0wnage.attackresearch has published an article about a critical vulnerability that allows attackers to gain access to a computer that has been blocked or is waiting for a user to log on.
To play it, it is enough to add a special registry key from the command line that is responsible for calling the “sticky keys” component by pressing the Shift key five times, or replace the executable file of this function with the command line. This allows attackers to launch applications, gain access to personal data and perform file operations without any difficulties, while not even logging in under any of the users.

Microsoft has not yet received official comments on this incident, but the vulnerability is still relevant for Windows 7, Windows 8 Consumer Preview, and even Windows Server 2008 R2. In addition, RDP sessions are also subject to similar hacking. As a protection against such manifestations, it is necessary to disable sticky keys in the center of accessibility.

 

[D-Mass]

Thanks - disconnected.

 

[Матушкин Андрей Николаевич]

Thanks, Roman.

 

[Краев Евгений Леонидович]

Thanks for the helpful stuff! Sticking disabled

 

[Патрушев Михаил Владимирович]

Thank! Very interesting. It would be nice to know how to disable this sticking! : lol:

 

[Частный детектив Днепр]

Cheerful little business man ... Thank you Roma shaw warned! The main thing now is not to eat sweets over the clave - the Schaub did not stick: lol:

 

[Частный детектив Нижний Новгород]

thank

 

[Плотников Юрий Михайлович]

Thank!

 

[Краев Евгений Леонидович]

Cheerful little business man ... Thank you Roma shaw warned! The main thing now is not to eat sweets over the clave - the Schaub did not stick: lol:

: lol:: lol:: lol: