Technical Information

Brief overview of the risk:
A privilege elevation vulnerability exists in Windows Shell in the way that the operating system performs detection and registration of new hardware. This vulnerability could allow an authenticated user to take complete control of the system.
Detailed Information on the risk:
This bulletin covers a privilege escalation issue in the Windows Shell new hardware detection code. Unprivileged users can convince Windows to execute their code in a privileged context when a new hardware event takes place, such as when a CD is inserted or a USB device is plugged in.Further information on this exploit is available at : MS07-006