SP2's data execution protection cracked

Dexsal · Feb 1, 2005, 12:37 AM

A Russian security firm has published a paper detailing a major security flaw in Microsoft Service Pack Two for Windows XP, over a month after alerting Redmond to the flaw.

The SP2 measure, known as Data Execution Protection, is intended to prevent would-be attackers from inserting rogue code into a PC's memory and tricking Windows into running the program. However, in a paper published on Friday, Moscow-based Positive Technologies said two minor mistakes in the implementation of the technology allow a knowledgeable programmer to sidestep the protection.

Read More ZDnet

Feb 1, 2005, 12:37 AM	#1
Dexsal Space Monocerotis Join Date: May 2004 Location: Aust Posts: 1,401 Rep Power: 0	SP2's data execution protection cracked A Russian security firm has published a paper detailing a major security flaw in Microsoft Service Pack Two for Windows XP, over a month after alerting Redmond to the flaw. The SP2 measure, known as Data Execution Protection, is intended to prevent would-be attackers from inserting rogue code into a PC's memory and tricking Windows into running the program. However, in a paper published on Friday, Moscow-based Positive Technologies said two minor mistakes in the implementation of the technology allow a knowledgeable programmer to sidestep the protection. Read More ZDnet