Confirmed users
1,982
edits
Line 157: | Line 157: | ||
On Windows 8, IE10 is both a metro app and as a regular desktop application. When run as a metro app it does things that are known to be off-limits for metro applications. This section details what we know so far about IE10 that is unexpected from a metro app. | On Windows 8, IE10 is both a metro app and as a regular desktop application. When run as a metro app it does things that are known to be off-limits for metro applications. This section details what we know so far about IE10 that is unexpected from a metro app. | ||
=== Observations === | |||
** Metro instance loads WinRT dlls (Windows.UI.dll, Windows.UI.Immersive.dll) but aside from this, same executable, linked to the same standard libraries for both Metro and Desktop instances. | |||
** Unlike standard Metro apps, IE runs in the desktop configuration (medium integrity parent process, multiple low integrity children). | |||
** IE can be suspended according to PE. | |||
** Security related arguments for a single browser within Metro fall flat considering Metro IE does not appear to be running within the sandbox. | |||
=== Process Exploration and Security === | |||
The following investigation was done with Windows 8 build 8102 and Process Explorer of 9/20. | The following investigation was done with Windows 8 build 8102 and Process Explorer of 9/20. |