Dailydave mailing list archives

Re: Vista SP1

From: Alexander Sotirov <alex () sotirov net>
Date: Thu, 24 Apr 2008 18:57:51 -0700

On Thu, Apr 24, 2008 at 07:27:18AM -0400, Dave Aitel wrote:

Vista SP1 was released to Automatic Update. One thing about SP1 is that it
breaks the Flash exploit Mark Dowd describes in his paper by making certain
memory NX.


What memory does SP1 make NX? The iexplore.exe process is not on the OptIn DEP
list in Vista SP1, so everything in memory is always executable. 

Alex

Attachment: _bin
Description:

_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave

Current thread:

Vista SP1 Dave Aitel (Apr 24)
- Re: Vista SP1 Alexander Sotirov (Apr 24)
  - Re: Vista SP1 Dave Aitel (Apr 25)
    - Re: Vista SP1 Dave Aitel (Apr 25)
    - Re: Vista SP1 Robert Hensing (EL CONQUISTADOR) (Apr 25)
    - Re: Vista SP1 Kostya Kortchinsky (Apr 25)
    - Re: Vista SP1 Alexander Sotirov (Apr 26)