Vista's Security Rendered Completely Useless by New Exploit

Pain of Salvation · Aug 10, 2008

I´m sorry if it already have been posted, but I want to read some opinions on this:

http://www.neowin.net/news/main/08/...ty-rendered-completely-useless-by-new-exploit

This week at the Black Hat Security Conference two security researchers will discuss their findings which could completely bring Windows Vista to its knees.

Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov, of VMware Inc. have discovered a technique that can be used to bypass all memory protection safeguards that Microsoft built into Windows Vista. These new methods have been used to get around Vista's Address Space Layout Randomization (ASLR), Data Execution Prevention (DEP) and other protections by loading malicious content through an active web browser. The researchers were able to load whatever content they wanted into any location they wished on a user's machine using a variety of objects, such as Java, ActiveX and even .NET objects. This feat was achieved by taking advantage of the way that Internet Explorer (and other browsers) handle active scripting in the Operating System.

.
.
.
Click to expand...

ambient_88 · Aug 11, 2008

A thread has already been started regarding this issue.

See: https://www.wilderssecurity.com/showthread.php?p=1297261#post1297261

Log in or Sign up

Vista's Security Rendered Completely Useless by New Exploit

Pain of Salvation Registered Member

ambient_88 Registered Member

Log in or Sign up

Vista's Security Rendered Completely Useless by New Exploit

Pain of Salvation Registered Member

ambient_88 Registered Member

Useful Searches