Metasploit mailing list archives

MS09-012 updates

From: riaf at mysec.org (Fairuzan Roslan)
Date: Fri, 17 Apr 2009 16:03:18 +0800

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi all,

Its seems that the recent MS09-012 updates (http://support.microsoft.com/kb/956572 
)
cause a problem to a few exploit modules with NX/DEP capability (which  
rely on NTDLL.DLL).

The recent MS09-012 updates changed NTDLL.DLL to version 5.2.3790.4455
which changed the address of LdrpCheckNXCompatibility (eg.0x7c83f517)
in Win2003 SP2 among other things.

Regards,
riaf


-----BEGIN PGP SIGNATURE-----
Version: 9.9.1.287

wsBVAwUBSeg3xooumJWbtfubAQgxswgAlfKyFaBL9BhBdFWFXesUCzb1/odDdfZK
tx2elyZpUMtj31teINdn1Dlv71azCkYoyDWEaKk/IlchclsznORRcGNzL3wP9exG
0yFWJnpEtNB5XUCbZUtTx/tEbaTXRF32+0GwjAOYkqn76EyiiGv9HGF4qkUORDkY
ZMqJ/edzR+IHpolV5/L8zkipDGy4EKwS79POSgO83ViNSxHZqlJjGETgOdmYmkNB
gXqp3cxj3SONnU5I3Cqm3crEZJxxOAefapzGBSWnXwzxlDPu/QLXvKYAqKhY5Koa
5xsMonEpUCr7pTkLYWeVWrYxxvLmBYDUeEG/j0Zn5ocA6+c31t4A6g==
=7Bvf
-----END PGP SIGNATURE-----

Current thread:

MS09-012 updates Fairuzan Roslan (Apr 17)