Privilege Escalation via "Sticky" Keys Windows 7, 2008 R2, Windows 8 Exploit; Windows Phone 8 'Global Search'; Microsoft's $15 Windows 8 Upgrade Comfirmed Starts June 2, 2012 - Jan 31st, 2013,Will Offers Free Windows 8 Workshops

A well documented privilege escalation via "Sticky" Keys exploit lets you gain access to systems running Windows 7 operating system. The exploit is currently unpatched, and appears to work in both Windows 7 and Windows Server 2008 R2. The exploit also works on Windows 8 Consumer Preview at time of writing.According to an article replacing […]

Windows 7,Windows Server 2008 R2, Windows 8 Privilege Escalation via Stick Keys exploit

A well documented privilege escalation via "Sticky" Keys exploit lets you gain access to systems running Windows 7 operating system. The exploit is currently unpatched, and appears to work in both Windows 7 and Windows Server 2008 R2.

The exploit also works on Windows 8 Consumer Preview at time of writing.

According to an article replacing "Sticky Keys" on the login screen for Windows 7 with the "command line" executable, could let a user gain acces to a system with jus the typing the following code: REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\sethc.exe" /v Debugger /t REG_SZ /d "C:\windows\system32\cmd.exe"

"After which, the user can later anytime can press the SHIFT key five times to launch an elevated command prompt to launch any process -- even Explorer -- and do anything you like as you would if you were logged on," Carnal0wnage writes.

The code above sets the debugger for Sticky Keys to the executable file for the command line applet, which is run at the system level when the machine is locked. Additionally, it's possible to perform a similar hack via RDP session. Once in place, the hack is virtually undetectable aside from the registry key.

A previous exploit existed where Utility Manager could be replaced using a Live CD, but this exploit only requires 10 seconds in front of the machine and it is in place.

privilege escalation  Sticky Keys Exploit

In other Microsoft news,

Windows 8 Upgrade Program kicks of June 2

Microsoft's Windows 7 to Windows 8 upgrade programs, is now confiremd and that Microsoft Store retail locations in the US will also offer people who purchase the upgrade free workshops to learn more about Windows 8, reports Verge. The article also claims that the Windows 8 Pro upgrade program will last until January 31, 2013.

In addition, Microsoft Stores will also offer customers a $20 Microsoft Store gift card if they participate in the program, which basically covers the cost of the Windows 8 upgrade with $4.99 to spare.

Also, here are some recently leaked Windows 8 Release Preview build 8400 screenshots -- which is said to be releasing on June 1st.

Windows 8 Release Preview Build 8400 Screens Leak

Windows 8 Build 8400 Release Preview Screen Leaks

Finally, as we approaching closer to E3 and Windows Phone Developer Summit, a Windows Phone 8 "Apollo" rumor just revealed that, "Windows Phone 8 will feature a global search option that can be activated right from the start screen."

Of course both Android and iOS have included a similar feature for quite some time, as does Windows 8 (as Insideris pointed out), but this will be a first in the realm of Windows Phone and should be one of many new features demonstrated in Windows Phone 8.

According to an anonymous tipster, unlike in Window Phone 7, where you have to swipe to the left in order to see your apps and search icon, Windows Phone 8 features the very same icon in front of the start screen, just below the arrow icon and before the third icon (see the mockup screen below) -- will be a search icon that brings up the global search feature.

"One user clicks the search icon and types in this screen, Windows Phone 8 will apparently search your entire phone for relevant results, including "contacts, apps, games and more." It means that in order for you to quickly call someone, you no longer have to go to the address book. Simply start typing his/her name from the home page and perform desired action," reports Insideris.

Windows Phone 8 Apollo Global Search feature mockup

If you are wondering, why we have include this report in the Windows 8 news article, it is because this is exactly what Windows 8 does too!