Microsoft Fixes ASLR/DEP Bypass Bug

ronjor · Aug 13, 2013

by Dennis Fisher

Buried in the details of the Microsoft Patch Tuesday release for August is the explanation of an important change that the company made to Windows that defeats a group of exploit mitigation bypasses. The change is a small one, but it prevents dangerous attacks that previously worked on most supported version of Windows.

The last few versions of the operating system have included a portfolio of technologies known as exploit mitigations that are designed to prevent specific kinds of memory corruption attacks. These attacks rely on an underlying vulnerability, such as a buffer overflow, and often give the attacker control of a vulnerable machine. In the last several years, Microsoft has been adding more and more exploit mitigations to Internet Explorer and Windows both, and security researchers and attackers have been working apace to find ways around those defenses.
Click to expand...

http://threatpost.com/microsoft-fixes-aslrdep-bypass-bug/101983

anon · Aug 14, 2013

Microsoft Patch Tuesday: The Ping of Death returns, IPv6-style
http://www.computerworld.com/s/arti..._Tuesday_The_Ping_of_Death_returns_IPv6_style

Log in or Sign up

Microsoft Fixes ASLR/DEP Bypass Bug

ronjor Global Moderator

anon Registered Member

Log in or Sign up

Microsoft Fixes ASLR/DEP Bypass Bug

ronjor Global Moderator

anon Registered Member

Useful Searches