Windows Vista security 'rendered useless' by researchers

[NewsMaker]

Forum: CG News
Posted By: eek
Post Time: 08-09-2008 at 03:12 PM
Text:

By Dennis Fisher, Executive Editor
07 Aug 2008 | SearchSecurity.com

LAS VEGAS -- Two security researchers have developed a new technique that essentially bypasses all of the memory protection safeguards in the Windows Vista operating system, an advance that many in the security community say will have far-reaching implications not only for Microsoft, but also on how the entire technology industry thinks about attacks.
In a presentation at the Black Hat briefings, Mark Dowd of IBM Internet Security Systems (ISS) and Alexander Sotirov, of VMware Inc. will discuss the new methods they've found to get around Vista protections such as Address Space Layout Randomization(ASLR), Data Execution Prevention (DEP) and others by using Java, ActiveX controls and .NET objects to load arbitrary content into Web browsers.

http://searchsecurity.techtarget.co...1324395,00.html

Good time to be using max and .net extensions

Source