New issue
Advanced search Search tips

Issue 608282 link

Starred by 2 users

Issue metadata

Status: WontFix
Owner: ----
Closed: May 2016
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: Use Google Chrome in Privilege Escalation

Reported by xtr3am3r...@gmail.com, May 2 2016

Issue description

Hi! I am make video as proof how ez, to get system.
 
Video_2016-05-02_114732.rar
9.3 MB Download
This is pure Python updater for this bug
Owner: xtr3am3r.0k@gmail.com
OS: Windows XP,7,8,10
What you are describing is a physically-local attack, which is outside Chrome's threat model. If you already have access to replace arbitrary files on the system, you can just as well replace system executables as well. See this FAQ item for more info: http://dev.chromium.org/Home/chromium-security/security-faq#TOC-Why-aren-t-physically-local-attacks-in-Chrome-s-threat-model-
Status: WontFix (was: Unconfirmed)
Project Member

Comment 5 by sheriffbot@chromium.org, Aug 9 2016

Labels: -Restrict-View-SecurityTeam
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 6 by sheriffbot@chromium.org, Oct 1 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Project Member

Comment 7 by sheriffbot@chromium.org, Oct 2 2016

This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot
Labels: allpublic

Sign in to add a comment