Vulnerability Development mailing list archives

Re: overwriting SEH and debugging


From: H D Moore <sflist () digitaloffense net>
Date: Sat, 22 Dec 2007 13:35:48 -0600

Just free of SafeSEH restrictions themselves (the flags are slightly 
different too).

-HD

On Saturday 22 December 2007, Dude VanWinkle wrote:
Does ATL.dll and friends equate to the SEH version of XPSP2's
starforce.dll (where you can turn off DEP by invoking it), meaning
does calling them cancel out all SafeSEH security, or are they just
free from the SafeSEH restrictions by themselves?

I assume its the latter, but just thought I would ask...



Current thread: