lsass.exe: BUFOVRFLOW

Discussion in 'other security issues & news' started by polocanada, Jun 8, 2008.

Thread Status:
Not open for further replies.
  1. polocanada

    polocanada Registered Member

    Joined:
    Aug 19, 2007
    Posts:
    60
    I just used Registry Monitor from Systernals, first time on this Vista PC. I got several lines with this:

    XXXXXXXX lsass.exe:936 QueryValue HKLM\SECURITY\Policy\SecDesc\(Default) BUFOVRFLOW

    Seems like lsass.exe causinig buffer overflow.

    I am wondering whether this is a reason for concern? ANybody knows?

    Thank you.
     
  2. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Mark Russinovich gives a good write up concerning those buffer overflow entries from his program Regmon.

    Buffer Overflows
    ....cont
     
  3. nomarjr3

    nomarjr3 Registered Member

    Joined:
    Jul 31, 2007
    Posts:
    502
    You should consider using buffer overflow protection like Comodo Memory Firewall or Threatfire.
     
Thread Status:
Not open for further replies.