[Knitebane]

I dunno - it's been years since I've heard of any remote [& non-priveleged] rootings which weren't already covered by a Microsoft update.

Here, let me bring you up to date:

Windows Vista zero-day vulnerability

[js1138]

That one’s only two years old.

[KayEyeDoubleDee]

If you read the link you posted for him, all the "attacker" can do is run commands from the user's user space.

If the user isn't an Administrator, there isn't any remote rooting.

But that's true of any executable that a user downloads and runs within their user space - the executable can f*** with that user's files, but it can't touch the rest of the system.