Due to a vulnerability in the Sysinternals PsTools share mapping, an attacker with a user account can execute arbitrary code as an administrator.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33839/pstoolsVuln.txt
Source: https://packetstormsecurity.com/files/33839/pstoolsVuln.txt.html