Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Favorites infavorites:mine
infavorites:1234
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with Search options answers only user 975

Address Space Layout Randomisation (ASLR) is a technology used to help prevent shellcode from being successful. It does this by randomly offsetting the location of modules and certain in-memory structures.

1
vote
Despite having thousands of entries, the CWE system is not granular enough to express this specific violation. However, there are more general CWE families that could help. CWE-2: Environment looks …
answered Jul 10 '13 by rook
5
votes
The text segment is not typically randomized in ASLR implementations, and this is why Return-Oriented Programming (ROP) chains work. The idea is that the application's own code should be 'safe …
answered Oct 13 '14 by rook
13
votes
. However, under Windows, ASLR enabled libraries will have a randomized memory space, so the attacker won't know the memory address of the system() function, and there for cannot call it. The idea … behind ASLR is that It doesn't matter if you can control the EIP if you don't know where to jump to. Being able to read the location of a region of randomized memory undermines the protection of ASLR
answered Oct 22 '12 by rook
3
votes
The text segment which is also called the code segment, contains the application's static functionality is not randomized by ASLR. An exploit can jump anywhere into this region of memory reliably …
answered Nov 1 '14 by rook