Slashdot Mirror

← Back to Stories (view on slashdot.org)

Defeating XP SP2 Heap Protection

Posted by michael on from the secure-by-design dept.

hobo2k writes "XP SP2 included canary values and hardware-implemented execution protection in order to avoid exploitable buffer overruns. Now Positive Technologies has released an article describing one way that protection could be bypassed. To solve the problem, they provide a program which disables the small allocation heap as described here. CNET reports that SP2 has been foiled."

5 of 242 comments (clear)

  1. bugs by Respawner · · Score: 0, Offtopic

    should bugs or exploits in windows still be frontpagenews ?

  2. Re:foiled? by gardyloo · · Score: 0, Offtopic

    Sorry, all. I must've been thoroughly drunk when I wrote that crap about standards on here.

  3. Don't forget... by bonch · · Score: 0, Offtopic

    www.apple.com/switch :)

  4. Service Pack 2 kills my Celphone "Modem". by Forge · · Score: 0, Offtopic

    Windows XP Service Pack 2 has only 1 problem (for me) beyond those of regular XP.

    My celphone can no longer be used as a cerial divice, aka; Dialup modem.

    Yes, The same hardware works on Linux (Dell Inspiron 8200, Sony Erricson T220 on a USB cable) and removing the pack got it working in Windows again.

    --
    --= Isn't it surprising how badly I spell ?
  5. OK, I checked that out! Here is what I think... by rbarreira · · Score: 1, Offtopic
    I checked out the "Top 10 reasons" to change to a Mac, because I was really curious. After I read it I just thought "Was this the best they could do?".

    Let's see:
    "1. The Mac...It Just Works"

    Thanks, my computer works too.
    "2. It Doesn't Crash"

    This might have been an argument against PC's with Windows a few years ago, but not so much now. I won't even mention Linux, of course.
    "3. It's a Digital Jukebox"

    Wou grate!!!11!!!
    "4. Delivers The Promise Of Digital Photography"

    This one really turns me on too...
    "5. Best Solution, In Fact, For All Things Digital"

    Maybe they could stop repeating themselves... BTW, the best programs to produce music and multimedia content exist for PC too, and the quantity of plugins is much greater on the PC.
    "6. Built To Go Everywhere -- Because That's Where You'll Want It"

    On this section they say:
    Consider this: Can your PC laptop go coast to coast with just one battery? Can you put the system to sleep just by closing the lid? Does it wake up instantly? Can your PC laptop automatically switch between Ethernet, dial-up and wireless connections on the fly? Without a restart? Ours can.

    Yep, my PC can do all that too...
    "7. The Internet Is Integrated"

    Fact is, most of our customers are up-and-surfing within 15 minutes.

    I can do that easily too. So maybe this would only be valid for people who know nothing about computers. Even then, I doubt it's much easier to configure an internet connection than in a PC in most cases. Prove me wrong.
    "8. Office is Office and then Some"

    OK, so this section tells me that some of the programs I use on the PC are also available for the MAC. This is hardly a reason for me to switch.
    "9. It Works Effortlessly With PCs"

    See previous answer.
    "10. It's Beautiful"

    11- Fuck That.
    --

    The AACS key is NOT 0xF606EEFD628B1CA427BEA93A9CA9773F