Is it Game Over for Windows Vista’s Security?
Reading through my RSS feeds today, I stumbled upon an interesting post over at Neowin entitled “Vista’s Security Rendered Completely Useless by New Exploit” which reports on a new technique that can “bypass all memory protection safeguards that Microsoft built into Windows Vista.”
Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov, of VMware Inc. have discovered a technique that can be used to bypass all memory protection schemes that have been built into Windows Vista by Microsoft. These new methods are basically used to get around Vista’s Address Space Layout Randomization (ASLR), Data Execution Prevention (DEP) and other protections by loading malicious content through a web browser.
Older

