Re: AUTORUN.INF Vulnerability

[Valentin Pletzer]

Hi maybe some addition to that:
At 00:07 18.02.00 -0500, you wrote:

>administrative privileges, then it invokes Explorer on that directory to
>open the directory like normal.

This is not true if the directory is opened with the Workplace and not the
Explorer

>very real exploit; no directory guessing, i.e. did they name the WIN
>directory Windows or Winnt?
how about %windir% ???

quoted as short as possible ??? ;-)