funsec mailing list archives
New version of EMET is now available
From: Jeffrey Walton <noloader () gmail com>
Date: Fri, 20 May 2011 02:03:00 -0400
It looks like Microsoft released a new version of EMET: http://blogs.technet.com/b/srd/archive/2011/05/18/new-version-of-emet-is-now-available.aspx. Does anyone know what the “Bottom-up Rand” is mitigating? Perhaps threats that use a loose process DACL (VM_PROCESS_READ, VM_PROCESS_WRITE and friends) [1] combined with deterministic base addresses? Jeff [1] http://msdn.microsoft.com/en-us/library/ms684880(v=vs.85).aspx _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- New version of EMET is now available Jeffrey Walton (May 19)