Re: overwriting SEH and debugging

H D Moore <[email protected]> Sat, 22 Dec 2007 13:35:48 -0600

Newsgroups	gmane.comp.security.vulnerabilities
Message-ID	<[email protected]>

Just free of SafeSEH restrictions themselves (the flags are slightly 
different too).

-HD

On Saturday 22 December 2007, Dude VanWinkle wrote:
> Does ATL.dll and friends equate to the SEH version of XPSP2's
> starforce.dll (where you can turn off DEP by invoking it), meaning
> does calling them cancel out all SafeSEH security, or are they just
> free from the SafeSEH restrictions by themselves?
>
> I assume its the latter, but just thought I would ask...