ie8 fix
madison

Reply to Message

Still being able to defeat DEP and ASLR on Win7 is a big deal.
Zogg 1st Sep 2010
@bobiroc

I certainly wouldn't say that an exploit being able to defeat ASLR/DEP was just a Quicktime problem! DEP is supposed to be enforced at the chip level, and should be implemented such that it is impossible to turn off. Are you running Windows 7? And if you are, does your boot.ini file contain a setting like "OptIn", "OptOut" or "AlwaysOn"? Anything other than "AlwaysOn" would imply that any lucky exploit might defeat ASLR/DEP.

This particular exploit sounds like it might be using Sotirov and Dowd's techniques, which would also make it specific to 32 bit platforms.
ie8 fix
Click Here
ie8 fix

The best of ZDNet, delivered

ZDNet Newsletters

Get the best of ZDNet delivered straight to your inbox

ie8 fix