Full Disclosure: Re: ASLR now built into Vista

[<0x80 () hush ai>]

So is this a paid Microsoft advertisment?

On Fri, 26 May 2006 13:22:49 +1000 David Litchfield 
<davidl () ngssoftware com> wrote:
> Address Space Layout Randomization is now part of Vista as of beta 
> 2 [1] . I 
> wrote about ASLR on the Windows platform back in September last 
> year [2] and 
> noted that unless you rebase the image exe then little (not none!) 
> is added. 
> ASLR in Vista solves this so remote exploitation of overflows has 
> just got a 
> lot harder. I've not done a thorough analysis yet but, all going 
> well, this 
> is a fantastic way for Microsoft to go and builds on the work done 
> with 
> NX/DEP and stack cookies/canaries.
>
> Cheers,
> David Litchfield
>
> [1] 
> http://msdn.microsoft.com/windowsvista/downloads/products/getthebet
> a/default.aspx
> [2] http://www.ngssoftware.com/papers/xpms.pdf
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/


Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/