Microsoft Windows XP Unauthorized Hotkey Program Execution Vulnerability

Bugtraq ID:	3703
Class:	Design Error
CVE:	CVE-2001-1200
Remote:	No
Local:	Yes
Published:	Dec 17 2001 12:00AM
Updated:	Jul 11 2009 09:06AM
Credit:	Discovered and posted to Bugtraq by Charles Chear <[email protected]>.
Vulnerable:	Microsoft Windows XP Professional Microsoft Windows XP Home Microsoft Windows XP 0
Not Vulnerable:

Microsoft Windows XP Unauthorized Hotkey Program Execution Vulnerability

When a Windows XP system is locked, requiring a user to enter authentication information to unlock the system, it is reportedly possible for a user to initiate programs by using Hotkey combinations. Only programs associated with specific hotkeys, usually configured by the administrator or user, can be executed.

Microsoft Windows XP Unauthorized Hotkey Program Execution Vulnerability

There is no exploit required for this issue.

Microsoft Windows XP Unauthorized Hotkey Program Execution Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Microsoft Windows XP Unauthorized Hotkey Program Execution Vulnerability

References: