Re: ASLR now built into Vista

So is this a paid Microsoft advertisment?

On Fri, 26 May 2006 13:22:49 +1000 David Litchfield 
<[email protected]> wrote:
>Address Space Layout Randomization is now part of Vista as of beta 

>2 [1] . I 
>wrote about ASLR on the Windows platform back in September last 
>year [2] and 
>noted that unless you rebase the image exe then little (not none!) 

>is added. 
>ASLR in Vista solves this so remote exploitation of overflows has 
>just got a 
>lot harder. I've not done a thorough analysis yet but, all going 
>well, this 
>is a fantastic way for Microsoft to go and builds on the work done 

>with 
>NX/DEP and stack cookies/canaries.
>
>Cheers,
>David Litchfield
>
>[1] 
>http://msdn.microsoft.com/windowsvista/downloads/products/getthebet

>a/default.aspx
>[2] http://www.ngssoftware.com/papers/xpms.pdf
>
>
>
>_______________________________________________
>Full-Disclosure - We believe in it.
>Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>Hosted and sponsored by Secunia - http://secunia.com/



Concerned about your privacy? Instantly send FREE secure email, no account required
http://www.hushmail.com/send?l=480

Get the best prices on SSL certificates from Hushmail
https://www.hushssl.com?l=485

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/