Microsoft Windows 2000 is prone to an issue that may result in an attacker obtaining unauthorized access to a compromised system. The issue exists when Internet Explorer is configured with 'Medium-Low' security settings. When configured in such a manner, it may be possible for an attacker to present a dialog to download and install a driver. The malicious driver may then provide a conduit that provides for unauthorized RPC communications.
Microsoft Windows 2000 is prone to an issue that may result in an attacker obtaining unauthorized access to a compromised system. The issue exists when Internet Explorer is configured with 'Medium-Low' security settings. When configured in such a manner, it may be possible for an attacker to present a dialog to download and install a driver. The malicious driver may then provide a conduit that provides for unauthorized RPC communications.