There IS no security on the Win32 message system.

Seriously.

People have been crowing about it for some time. Practical exploitation of it is difficult, but doable.