bugtraq - ASLR now built into Vista

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <053501c68074$a87f8950$5e0ba8c0@ngssoftware.com>
Date: Fri, 26 May 2006 04:22:49 +0100
From: "David Litchfield" <davidl@...software.com>
To: <full-disclosure@...ts.grok.org.uk>, <bugtraq@...urityfocus.com>,
	<ntbugtraq@...tserv.ntbugtraq.com>
Subject: ASLR now built into Vista

Address Space Layout Randomization is now part of Vista as of beta 2 [1] . I 
wrote about ASLR on the Windows platform back in September last year [2] and 
noted that unless you rebase the image exe then little (not none!) is added. 
ASLR in Vista solves this so remote exploitation of overflows has just got a 
lot harder. I've not done a thorough analysis yet but, all going well, this 
is a fantastic way for Microsoft to go and builds on the work done with 
NX/DEP and stack cookies/canaries.

Cheers,
David Litchfield

[1] 
http://msdn.microsoft.com/windowsvista/downloads/products/getthebeta/default.aspx
[2] http://www.ngssoftware.com/papers/xpms.pdf

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/