[Dailydave] Vista SP1

Alexander Sotirov alex at sotirov.net
Thu Apr 24 21:57:51 EDT 2008


On Thu, Apr 24, 2008 at 07:27:18AM -0400, Dave Aitel wrote:
> Vista SP1 was released to Automatic Update. One thing about SP1 is that it
> breaks the Flash exploit Mark Dowd describes in his paper by making certain
> memory NX.

What memory does SP1 make NX? The iexplore.exe process is not on the OptIn DEP
list in Vista SP1, so everything in memory is always executable. 

Alex
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 186 bytes
Desc: not available
Url : http://lists.immunitysec.com/pipermail/dailydave/attachments/20080424/c0d3a030/attachment-0001.pgp 


More information about the Dailydave mailing list