Full Disclosure mailing list archives
Re: ASLR now built into Vista
From: <0x80 () hush ai>
Date: Fri, 26 May 2006 21:53:52 +1000
So is this a paid Microsoft advertisment? On Fri, 26 May 2006 13:22:49 +1000 David Litchfield <davidl () ngssoftware com> wrote:
Address Space Layout Randomization is now part of Vista as of beta
2 [1] . I wrote about ASLR on the Windows platform back in September last year [2] and noted that unless you rebase the image exe then little (not none!)
is added. ASLR in Vista solves this so remote exploitation of overflows has just got a lot harder. I've not done a thorough analysis yet but, all going well, this is a fantastic way for Microsoft to go and builds on the work done
with NX/DEP and stack cookies/canaries. Cheers, David Litchfield [1] http://msdn.microsoft.com/windowsvista/downloads/products/getthebet
a/default.aspx [2] http://www.ngssoftware.com/papers/xpms.pdf _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Concerned about your privacy? Instantly send FREE secure email, no account required http://www.hushmail.com/send?l=480 Get the best prices on SSL certificates from Hushmail https://www.hushssl.com?l=485 _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- ASLR now built into Vista David Litchfield (May 25)
- Re: ASLR now built into Vista c0ntex (May 26)
- Re[2]: ASLR now built into Vista 3APA3A (May 26)
- <Possible follow-ups>
- Re: ASLR now built into Vista 0x80 (May 26)
- Re: ASLR now built into Vista c0ntex (May 26)