Knowledge (XXG)

User Interface Privilege Isolation

Source 📝

1935: 1946: 234: 49:
in the receiving process' context. This could be used by a malicious low-privilege processes to run arbitrary code in the context of a higher-privilege process, which constitutes an unauthorized
214: 113: 1976: 950: 53:. By restricting the ability of lower-privileged processes to send window messages to higher-privileged processes, UIPI can mitigate these kinds of attacks. 965: 42:, it prevents processes with a lower "integrity level" (IL) from sending messages to higher IL processes (except for a very specific set of UI messages). 1130: 207: 787: 88:"The Windows Vista and Windows Server 2008 Developer Story: Windows Vista Application Development Requirements for User Account Control (UAC)" 1821: 200: 1950: 223: 1200: 840: 424: 259: 1372: 797: 429: 120: 1120: 1100: 1063: 1025: 1010: 1866: 1448: 975: 165: 990: 1831: 1700: 1387: 1377: 1251: 1155: 1015: 372: 327: 1939: 1307: 1266: 1165: 1020: 817: 532: 482: 67: 39: 1529: 1409: 1115: 614: 254: 247: 242: 1861: 1826: 1256: 1246: 1185: 1095: 985: 955: 604: 302: 1226: 1170: 1150: 995: 764: 649: 46: 539: 1811: 1806: 1650: 1645: 1605: 1565: 1515: 1261: 1005: 1000: 875: 850: 812: 782: 732: 544: 467: 392: 312: 287: 70:
to prohibit potentially unsafe documents from modifying components, files, and other resources on a system.
144: 1971: 1791: 1755: 1367: 1352: 1110: 1068: 960: 890: 807: 792: 387: 1920: 1740: 1685: 1625: 1610: 1419: 1090: 1045: 902: 855: 63: 1905: 1900: 1745: 1715: 1680: 1570: 1276: 1271: 1175: 1125: 1083: 1053: 940: 527: 492: 439: 377: 50: 1846: 1705: 1660: 1635: 1590: 1536: 1335: 1190: 1073: 522: 507: 447: 367: 337: 45:
Window messages are designed to communicate user action to processes. However, they can be used to
31: 1851: 1801: 1575: 1494: 1480: 1399: 1105: 945: 912: 885: 880: 554: 457: 452: 352: 56:
UIPI, and Mandatory Integrity Control more generally, is a security feature but not a security
1915: 1841: 1796: 1695: 1690: 1665: 1620: 1585: 1455: 759: 569: 402: 170: 1856: 1765: 1600: 1543: 1501: 1362: 1330: 1286: 1241: 1160: 920: 717: 594: 584: 347: 342: 1892: 1775: 1750: 1735: 1725: 1675: 1670: 1424: 1058: 774: 639: 629: 574: 559: 417: 307: 87: 1382: 925: 737: 727: 712: 644: 512: 487: 462: 412: 382: 292: 35: 1965: 1871: 1730: 1630: 970: 930: 707: 682: 674: 609: 477: 277: 27: 1640: 1595: 1522: 1487: 1195: 1145: 935: 687: 634: 599: 517: 497: 317: 297: 1710: 1655: 1560: 1414: 1302: 1180: 1035: 827: 802: 397: 192: 1615: 1439: 980: 870: 744: 664: 589: 407: 1236: 1231: 865: 754: 702: 472: 175: 149: 91: 1816: 1720: 1580: 1340: 1205: 835: 692: 579: 564: 502: 362: 322: 1836: 1770: 1508: 1394: 1357: 1345: 1030: 749: 722: 697: 659: 357: 282: 1910: 1760: 1429: 1210: 1135: 1876: 1312: 1140: 845: 619: 332: 1404: 1078: 897: 860: 196: 1322: 654: 624: 549: 1889: 1784: 1553: 1472: 1465: 1438: 1321: 1295: 1219: 1044: 911: 826: 773: 673: 438: 268: 145:"Microsoft Security Servicing Criteria for Windows" 208: 8: 1945: 1469: 215: 201: 193: 16:Security technology in Microsoft Windows 79: 1977:Microsoft Windows security technology 1822:Next-Generation Secure Computing Base 7: 951:Distributed Transaction Coordinator 1282:User Interface Privilege Isolation 164:Malhotra, Mike (August 13, 2009). 20:User Interface Privilege Isolation 14: 66:uses UIPI for its Protected View 1944: 1934: 1933: 26:) is a technology introduced in 1011:Remote Differential Compression 166:"Protected View in Office 2010" 1867:Windows System Assessment Tool 1: 1156:Open XML Paper Specification 1016:Remote Installation Services 224:Microsoft Windows components 1308:Windows Subsystem for Linux 1267:Mandatory Integrity Control 1021:Windows Deployment Services 818:Wireless Zero Configuration 40:Mandatory Integrity Control 38:exploits. By making use of 1993: 1410:Universal Windows Platform 1116:Kernel Transaction Manager 1101:Hardware Abstraction Layer 798:Multimedia Class Scheduler 1929: 1862:Windows Services for UNIX 1247:Data Execution Prevention 1096:Graphics Device Interface 986:Network Access Protection 605:Remote Desktop Connection 230: 119:. COSEINC. Archived from 1227:Security and Maintenance 1171:Security Account Manager 765:Windows XP visual styles 1812:Media Control Interface 1646:Help and Support Center 1262:Kernel Patch Protection 1026:System Resource Manager 1006:Remote Desktop Services 1001:Print Services for UNIX 783:Service Control Manager 393:Windows Error Reporting 313:DirectX Diagnostic Tool 1792:Desktop Cleanup Wizard 1368:COM Structured storage 1069:Desktop Window Manager 961:Windows Media Services 1420:Windows Mixed Reality 1091:Enhanced Write Filter 941:Roaming user profiles 64:Microsoft Office 2010 1701:Mobile Device Center 1651:Health & Fitness 1449:Solitaire Collection 1277:User Account Control 1272:Protected Media Path 1176:Server Message Block 1126:Logical Disk Manager 378:System Policy Editor 363:System Configuration 114:"Windows Vista UIPI" 51:privilege escalation 1847:Virtual DOS machine 1191:System Idle Process 1166:Resource Protection 1074:Portable Executable 966:Active DRM Services 368:System File Checker 338:Performance Monitor 32:Windows Server 2008 1852:Windows on Windows 1576:Backup and Restore 1388:Transaction Server 1106:I/O request packet 946:Folder redirection 615:Speech Recognition 373:System Information 328:Management Console 47:run arbitrary code 1959: 1958: 1885: 1884: 1842:Video for Windows 1797:Games for Windows 1666:Internet Explorer 760:Windows Spotlight 403:Windows Installer 1984: 1948: 1947: 1937: 1936: 1857:Windows SideShow 1636:Food & Drink 1530:Spider Solitaire 1470: 1363:ActiveX Document 1331:Active Scripting 1287:Windows Firewall 1242:Credential Guard 921:Active Directory 718:Indexing Service 348:Resource Monitor 343:Recovery Console 217: 210: 203: 194: 187: 186: 184: 182: 161: 155: 154: 141: 135: 134: 132: 131: 125: 118: 109: 103: 102: 100: 99: 84: 1992: 1991: 1987: 1986: 1985: 1983: 1982: 1981: 1962: 1961: 1960: 1955: 1925: 1893:Microsoft Store 1891: 1881: 1827:POSIX subsystem 1807:File Protection 1780: 1751:Program Manager 1736:Phone Companion 1726:Outlook Express 1676:Make Compatible 1606:Desktop Gadgets 1566:Anytime Upgrade 1549: 1461: 1434: 1425:Windows Runtime 1317: 1291: 1257:Family features 1215: 1040: 996:DFS Replication 907: 822: 813:Error Reporting 769: 669: 545:Mobility Center 540:Movies & TV 434: 418:Windows Insider 308:Driver Verifier 303:Drive Optimizer 270: 264: 255:Booting process 226: 221: 191: 190: 180: 178: 163: 162: 158: 143: 142: 138: 129: 127: 123: 116: 112:Edgar Barbosa. 111: 110: 106: 97: 95: 86: 85: 81: 76: 17: 12: 11: 5: 1990: 1988: 1980: 1979: 1974: 1964: 1963: 1957: 1956: 1954: 1953: 1942: 1930: 1927: 1926: 1924: 1923: 1918: 1913: 1908: 1903: 1897: 1895: 1887: 1886: 1883: 1882: 1880: 1879: 1874: 1869: 1864: 1859: 1854: 1849: 1844: 1839: 1834: 1829: 1824: 1819: 1814: 1809: 1804: 1799: 1794: 1788: 1786: 1782: 1781: 1779: 1778: 1773: 1768: 1763: 1758: 1756:Steps Recorder 1753: 1748: 1743: 1738: 1733: 1728: 1723: 1718: 1713: 1708: 1703: 1698: 1693: 1688: 1683: 1678: 1673: 1668: 1663: 1658: 1653: 1648: 1643: 1638: 1633: 1628: 1623: 1618: 1613: 1608: 1603: 1598: 1593: 1588: 1583: 1578: 1573: 1568: 1563: 1557: 1555: 1551: 1550: 1548: 1547: 1540: 1533: 1526: 1519: 1512: 1505: 1498: 1491: 1484: 1476: 1474: 1467: 1463: 1462: 1460: 1459: 1452: 1444: 1442: 1436: 1435: 1433: 1432: 1427: 1422: 1417: 1412: 1407: 1402: 1397: 1392: 1391: 1390: 1385: 1383:OLE Automation 1380: 1375: 1370: 1365: 1360: 1350: 1349: 1348: 1343: 1338: 1327: 1325: 1319: 1318: 1316: 1315: 1310: 1305: 1299: 1297: 1293: 1292: 1290: 1289: 1284: 1279: 1274: 1269: 1264: 1259: 1254: 1249: 1244: 1239: 1234: 1229: 1223: 1221: 1217: 1216: 1214: 1213: 1208: 1203: 1198: 1193: 1188: 1183: 1178: 1173: 1168: 1163: 1158: 1153: 1151:Object Manager 1148: 1143: 1138: 1133: 1128: 1123: 1118: 1113: 1111:Imaging Format 1108: 1103: 1098: 1093: 1088: 1087: 1086: 1081: 1071: 1066: 1061: 1056: 1050: 1048: 1042: 1041: 1039: 1038: 1033: 1028: 1023: 1018: 1013: 1008: 1003: 998: 993: 988: 983: 978: 973: 968: 963: 958: 953: 948: 943: 938: 933: 928: 923: 917: 915: 909: 908: 906: 905: 900: 895: 894: 893: 888: 883: 878: 873: 868: 858: 853: 848: 843: 838: 832: 830: 824: 823: 821: 820: 815: 810: 808:Task Scheduler 805: 800: 795: 790: 785: 779: 777: 771: 770: 768: 767: 762: 757: 752: 747: 742: 741: 740: 738:Special folder 735: 730: 725: 720: 710: 705: 700: 695: 690: 685: 679: 677: 671: 670: 668: 667: 662: 657: 652: 650:Voice Recorder 647: 642: 637: 632: 627: 622: 617: 612: 607: 602: 597: 592: 587: 582: 577: 572: 567: 562: 557: 552: 547: 542: 537: 536: 535: 525: 520: 515: 510: 505: 500: 495: 490: 485: 480: 475: 470: 465: 460: 455: 450: 444: 442: 436: 435: 433: 432: 427: 422: 421: 420: 413:Windows Update 410: 405: 400: 395: 390: 385: 383:System Restore 380: 375: 370: 365: 360: 355: 350: 345: 340: 335: 330: 325: 320: 315: 310: 305: 300: 295: 293:Device Manager 290: 285: 283:Command Prompt 280: 274: 272: 266: 265: 263: 262: 257: 252: 251: 250: 245: 237: 231: 228: 227: 222: 220: 219: 212: 205: 197: 189: 188: 156: 136: 104: 78: 77: 75: 72: 36:shatter attack 15: 13: 10: 9: 6: 4: 3: 2: 1989: 1978: 1975: 1973: 1972:Windows Vista 1970: 1969: 1967: 1952: 1943: 1941: 1932: 1931: 1928: 1922: 1919: 1917: 1914: 1912: 1909: 1907: 1904: 1902: 1899: 1898: 1896: 1894: 1888: 1878: 1875: 1873: 1872:Windows To Go 1870: 1868: 1865: 1863: 1860: 1858: 1855: 1853: 1850: 1848: 1845: 1843: 1840: 1838: 1835: 1833: 1830: 1828: 1825: 1823: 1820: 1818: 1815: 1813: 1810: 1808: 1805: 1803: 1800: 1798: 1795: 1793: 1790: 1789: 1787: 1783: 1777: 1774: 1772: 1769: 1767: 1764: 1762: 1759: 1757: 1754: 1752: 1749: 1747: 1744: 1742: 1741:Photo Gallery 1739: 1737: 1734: 1732: 1729: 1727: 1724: 1722: 1719: 1717: 1714: 1712: 1709: 1707: 1704: 1702: 1699: 1697: 1694: 1692: 1689: 1687: 1686:Meeting Space 1684: 1682: 1679: 1677: 1674: 1672: 1669: 1667: 1664: 1662: 1659: 1657: 1656:HyperTerminal 1654: 1652: 1649: 1647: 1644: 1642: 1639: 1637: 1634: 1632: 1629: 1627: 1626:Easy Transfer 1624: 1622: 1619: 1617: 1614: 1612: 1609: 1607: 1604: 1602: 1599: 1597: 1594: 1592: 1589: 1587: 1584: 1582: 1579: 1577: 1574: 1572: 1569: 1567: 1564: 1562: 1559: 1558: 1556: 1552: 1546: 1545: 1541: 1539: 1538: 1534: 1532: 1531: 1527: 1525: 1524: 1520: 1518: 1517: 1513: 1511: 1510: 1506: 1504: 1503: 1499: 1497: 1496: 1492: 1490: 1489: 1485: 1483: 1482: 1478: 1477: 1475: 1471: 1468: 1464: 1458: 1457: 1453: 1451: 1450: 1446: 1445: 1443: 1441: 1437: 1431: 1428: 1426: 1423: 1421: 1418: 1416: 1413: 1411: 1408: 1406: 1403: 1401: 1398: 1396: 1393: 1389: 1386: 1384: 1381: 1379: 1376: 1374: 1371: 1369: 1366: 1364: 1361: 1359: 1356: 1355: 1354: 1351: 1347: 1344: 1342: 1339: 1337: 1334: 1333: 1332: 1329: 1328: 1326: 1324: 1320: 1314: 1311: 1309: 1306: 1304: 1301: 1300: 1298: 1296:Compatibility 1294: 1288: 1285: 1283: 1280: 1278: 1275: 1273: 1270: 1268: 1265: 1263: 1260: 1258: 1255: 1253: 1250: 1248: 1245: 1243: 1240: 1238: 1235: 1233: 1230: 1228: 1225: 1224: 1222: 1218: 1212: 1209: 1207: 1204: 1202: 1199: 1197: 1194: 1192: 1189: 1187: 1184: 1182: 1179: 1177: 1174: 1172: 1169: 1167: 1164: 1162: 1159: 1157: 1154: 1152: 1149: 1147: 1144: 1142: 1139: 1137: 1134: 1132: 1129: 1127: 1124: 1122: 1121:Library files 1119: 1117: 1114: 1112: 1109: 1107: 1104: 1102: 1099: 1097: 1094: 1092: 1089: 1085: 1082: 1080: 1077: 1076: 1075: 1072: 1070: 1067: 1065: 1062: 1060: 1057: 1055: 1052: 1051: 1049: 1047: 1043: 1037: 1034: 1032: 1029: 1027: 1024: 1022: 1019: 1017: 1014: 1012: 1009: 1007: 1004: 1002: 999: 997: 994: 992: 989: 987: 984: 982: 979: 977: 974: 972: 969: 967: 964: 962: 959: 957: 954: 952: 949: 947: 944: 942: 939: 937: 934: 932: 929: 927: 924: 922: 919: 918: 916: 914: 910: 904: 901: 899: 896: 892: 889: 887: 884: 882: 881:Reparse point 879: 877: 874: 872: 869: 867: 864: 863: 862: 859: 857: 854: 852: 849: 847: 844: 842: 839: 837: 834: 833: 831: 829: 825: 819: 816: 814: 811: 809: 806: 804: 801: 799: 796: 794: 791: 789: 786: 784: 781: 780: 778: 776: 772: 766: 763: 761: 758: 756: 753: 751: 748: 746: 743: 739: 736: 734: 731: 729: 726: 724: 721: 719: 716: 715: 714: 711: 709: 706: 704: 701: 699: 696: 694: 691: 689: 686: 684: 683:Action Center 681: 680: 678: 676: 672: 666: 663: 661: 658: 656: 653: 651: 648: 646: 643: 641: 638: 636: 633: 631: 628: 626: 623: 621: 618: 616: 613: 611: 610:Snipping Tool 608: 606: 603: 601: 598: 596: 593: 591: 588: 586: 583: 581: 578: 576: 573: 571: 568: 566: 563: 561: 558: 556: 553: 551: 548: 546: 543: 541: 538: 534: 531: 530: 529: 526: 524: 521: 519: 516: 514: 511: 509: 506: 504: 501: 499: 496: 494: 491: 489: 486: 484: 481: 479: 476: 474: 471: 469: 468:Character Map 466: 464: 461: 459: 456: 454: 451: 449: 446: 445: 443: 441: 437: 431: 428: 426: 423: 419: 416: 415: 414: 411: 409: 406: 404: 401: 399: 396: 394: 391: 389: 386: 384: 381: 379: 376: 374: 371: 369: 366: 364: 361: 359: 356: 354: 351: 349: 346: 344: 341: 339: 336: 334: 331: 329: 326: 324: 321: 319: 316: 314: 311: 309: 306: 304: 301: 299: 296: 294: 291: 289: 288:Control Panel 286: 284: 281: 279: 278:App Installer 276: 275: 273: 267: 261: 258: 256: 253: 249: 246: 244: 241: 240: 239:Architecture 238: 236: 233: 232: 229: 225: 218: 213: 211: 206: 204: 199: 198: 195: 181:September 22, 177: 173: 172: 167: 160: 157: 152: 151: 146: 140: 137: 126:on 2012-04-18 122: 115: 108: 105: 93: 89: 83: 80: 73: 71: 69: 65: 61: 59: 54: 52: 48: 43: 41: 37: 33: 29: 28:Windows Vista 25: 21: 1906:File Manager 1746:Photo Viewer 1681:Media Center 1641:Groove Music 1571:Address Book 1542: 1535: 1528: 1523:Purble Place 1521: 1514: 1507: 1500: 1493: 1488:Chess Titans 1486: 1479: 1466:Discontinued 1454: 1447: 1281: 1146:Ntoskrnl.exe 1054:Boot Manager 1046:Architecture 936:Group Policy 828:File systems 728:Saved search 635:Sticky Notes 600:Quick Assist 528:Media Player 498:Feedback Hub 493:Fax and Scan 388:Task Manager 318:Event Viewer 298:Disk Cleanup 179:. Retrieved 169: 159: 148: 139: 128:. Retrieved 121:the original 107: 96:. Retrieved 94:. April 2007 82: 62: 57: 55: 44: 23: 19: 18: 1921:Minesweeper 1890:Spun off to 1711:MSN Dial-up 1706:Movie Maker 1611:Diagnostics 1561:ActiveMovie 1303:COMMAND.COM 1181:Shadow Copy 1036:Server Core 876:Mount Point 803:Shadow Copy 398:Windows Ink 1966:Categories 1901:DVD Player 1716:NetMeeting 1616:DriveSpace 1481:3D Pinball 981:SharePoint 745:Start menu 590:Phone Link 453:Calculator 408:PowerShell 269:Management 130:2012-04-18 98:2007-12-07 74:References 34:to combat 1696:Messenger 1691:Messaging 1621:DVD Maker 1591:CD Player 1586:CardSpace 1537:Solitaire 1237:BitLocker 1232:AppLocker 866:Hard link 755:Task View 733:Namespace 703:ClearType 523:Messaging 508:Magnifier 473:Clipchamp 448:3D Viewer 176:Microsoft 150:Microsoft 92:Microsoft 1940:Category 1817:MS-DOS 7 1802:ScanDisk 1721:NTBackup 1601:Contacts 1581:Cardfile 1516:Hold 'Em 1495:FreeCell 1341:VBScript 1252:Defender 1220:Security 1206:Winlogon 1161:Registry 775:Services 708:Explorer 693:AutoPlay 580:Paint 3D 565:OneDrive 555:Narrator 503:Get Help 458:Calendar 353:Settings 323:IExpress 58:boundary 1916:Mahjong 1837:Interix 1771:WinHelp 1671:Journal 1661:Imaging 1509:InkBall 1395:DirectX 1358:ActiveX 1346:JScript 1059:Console 1031:Hyper-V 926:Domains 750:Taskbar 723:IFilter 698:AutoRun 660:WordPad 655:Weather 570:OneNote 560:Notepad 483:Cortana 358:Sysprep 171:TechNet 68:sandbox 1949:  1938:  1911:Hover! 1785:Others 1766:Travel 1761:Syskey 1544:Tinker 1502:Hearts 1430:WinUSB 1415:WinAPI 1400:Native 1211:WinUSB 1136:MinWin 913:Server 713:Search 625:Sports 595:Photos 585:People 463:Camera 1877:WinFS 1776:Write 1473:Games 1440:Games 1313:WoW64 1141:NTLDR 1131:LSASS 1064:CSRSS 871:links 846:exFAT 675:Shell 640:Store 630:Start 620:Skype 575:Paint 550:Money 478:Clock 425:WinRE 333:Netsh 271:tools 260:Games 124:(PDF) 117:(PDF) 1951:List 1832:HPFS 1596:Chat 1554:Apps 1456:Surf 1405:.NET 1373:DCOM 1201:WHEA 1196:USER 1186:SMSS 976:WSUS 956:MSMQ 898:ReFS 861:NTFS 836:CDFS 793:CLFS 788:BITS 688:Aero 665:Xbox 645:Tips 533:2022 518:Maps 513:Mail 488:Edge 440:Apps 235:APIs 183:2017 30:and 24:UIPI 1731:Pay 1631:Fax 1378:OLE 1353:COM 1336:WSH 1323:API 1084:DLL 1079:EXE 991:PWS 971:IIS 931:DNS 903:UDF 891:EFS 886:TxF 856:FAT 851:IFS 841:DFS 430:WMI 60:. 1968:: 248:NT 243:9x 174:. 168:. 147:. 90:. 216:e 209:t 202:v 185:. 153:. 133:. 101:. 22:(

Index

Windows Vista
Windows Server 2008
shatter attack
Mandatory Integrity Control
run arbitrary code
privilege escalation
Microsoft Office 2010
sandbox
"The Windows Vista and Windows Server 2008 Developer Story: Windows Vista Application Development Requirements for User Account Control (UAC)"
Microsoft
"Windows Vista UIPI"
the original
"Microsoft Security Servicing Criteria for Windows"
Microsoft
"Protected View in Office 2010"
TechNet
Microsoft
v
t
e
Microsoft Windows components
APIs
9x
NT
Booting process
Games
App Installer
Command Prompt
Control Panel
Device Manager

Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.