Microsoft Windows keybd_event validation vulnerability: unprivileged shells or applications executed with the runas application or services with the INTERACT_WITH_DESKTOP flag are allowed to send keys to any application on the Desktop. By sending some short-cut keys it is possible to execute code, elevate privileges and bypass runas or service security restrictions. Proof of concept code included.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39867/MSRC-6005bgs-EN.txt
Source: https://packetstormsecurity.com/files/39867/MSRC-6005bgs-EN.txt.html