Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

RE: [Full-Disclosure] [ Positive Technologies ] Defeating Microsoft Wind

from [pigrelax] Network Security [Permanent Link]
Subject: RE: [Full-Disclosure] [ Positive Technologies ] Defeating Microsoft Windows XP SP2 Heap protection
Date: Sat, 29 Jan 2005 10:38:23 +0300 
 cool. Tested on AMD64 with DEP enabled.

-----Original Message-----
From: full-disclosure-bounces@lists.netsys.com
[mailto:full-disclosure-bounces@lists.netsys.com] On Behalf Of
aanisimov@ptsecurity.ru
Sent: Friday, January 28, 2005 5:41 PM
To: full-disclosure@lists.netsys.com
Subject: [Full-Disclosure] [ Positive Technologies ] Defeating
MicrosoftWindows XP SP2 Heap protection


It was discovered by MaxPatrol team that it is possible to defeat MicrosoftR
WindowsR XP SP2 Heap protection and Data Execution Prevention mechanism.

As a result it is possible to implement:
- Arbitrary memory region write access (smaller or equal to 1016 bytes);
- Arbitrary code execution;
- DEP bypass.

Details are described in the article:

http://www.maxpatrol.com/ptmshorp.asp


--
Best regards,
 aanisimov                          mailto:aanisimov@ptsecurity.ru

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: [Full-Disclosure] ICMP Covert channels question, Gadi Evron
Next by Date:  [Full-Disclosure] Is there a 0day vuln in this phisher's site?, lists-security
Previous by Thread:  [Full-Disclosure] [ Positive Technologies ] Defeating Microsoft Windows XP SP2 Heap protection, aanisimov
Next by Thread:  [Full-Disclosure] Re: NAT router inbound network traffic subversion, Kristian Hermansen
Indexes:  [Date] [Thread] [Top] [All Lists]