6
votes
2answers
380 views

How can I detect (or inventory) all DLLs that don't use ASLR?

Based on this IE zero day, I'm interested in listing all DLLs in our systems that have been compiled to not work with ASLR. Ideally, I'd like to analyze a static file and not load it into memory to ...
10
votes
1answer
514 views

Why are some DLLs not randomized? What makes it hard to deploy full ASLR for all DLLs?

One of the challenges with deploying ASLR for everything is that, at least on Windows, some DLLs (libraries) are not compiled in a way that's compatible with ASLR. (They're not compiled as ...
6
votes
1answer
165 views

Do 64-bit applications have any security merits over 32-bit applications?

A particular article from arstechnica.com stated this. One of these protective measures is called Address Space Layout Randomization, ASLR, and it works by moving DLLs and application memory into ...
4
votes
1answer
236 views

What attacks does a W^X policy prevent against?

Write xor Execute (W^X) is a policy that a block (page) of memory cannot be marked as both writeable and executable at the same time. What attacks does W^X prevent, with and without the following: ...