I was listening to a talk on Return Oriented Exploitation from the Black Hat 2010 conference. The speaker mentioned something about using the DLLs to exploit some of the memory corruption issues.
I know that the DLLs are loaded into the memory only if required by a certain program. But, are they always loaded into some static address range or at any particular memory address? Because, if every time these DLLs are loaded in some random memory address, it'll be really difficult to exploit the memory. (Please correct me if my assumptions are incorrect)
Anyone here with any insights of how this can be done? Is it even possible to exploit the memory vulnerabilities using DLLs?