The AppInfo service handles requests for UAC elevation. There's an issue with the checking of secure directories which allows a user to install a UIAccess application without requiring full access to a secure directory leading to the potential for EoP
more here.........https://code.google.com/p/google-security-research/issues/detail?id=220