F-Secure flaw opens door to intruders

TalkBack 2 of 26:

Next »

« Previous

• Thread View
• Flat View

?

This is a hole in F-Secure's user mode app. Not Windows anything. Microsoft isn't pushing the patch F-Secure is for their products.

Now if F-Secure compiled with Microsoft VS7 and the /GH switch the exploit would have caught the buffer over-run with a GPF instead of allowing rouge code. They could have simply run bounds-checker or similiar apps as well and caught this.

Also if they were running Windows XP SP2 with the new AMD or Intel that support NX (no execute) they never could have been the ability for the attacker to run code in either the stack or the data segment.

So Microsoft may have it's holes, but they are doing some pretty cool things to eliminate the impact even for the company's like f-Secure that have their own holes.

Posted by: LinuxHippie   Posted on: 02/11/05 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now