Description
The default configuration of the America Online (AOL) client software allows all users to modify a certain registry value that specifies a DLL file name, which might allow local users to gain privileges via a Trojan horse program.
References
- 16453 vdb-entry
- 20060131 Windows Access Control Demystified mailing-list
- VU#953860 third-party-advisory
- http://www.cs.princeton.edu/~sudhakar/papers/winval.pdf
- aol-insecure-default-permissions(24498) vdb-entry