Re: 换64位吧

Article View: cn.comp.internet

Article #1034

#1034

From: Cen
Date: Sat, 16 Jan 2010 13:00

41 lines
2988 bytes

1) MS只说DEP增加了这个漏洞攻击的难度, 没说DEP是免死金牌.
This vulnerability is more difficult to exploit successfully if Data Execution Protection (DEP) is enabled for Internet Explorer.

2) 64位的IE也有这个漏洞. 32位的Internet Explorer 5.01反而没这漏洞.
Affected Software
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista x64 Edition, Windows Vista x64 Edition Service Pack 1, and Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service pack 2
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for Itanium-based Systems

Non-Affected Software 
Internet Explorer 5.01 Service Pack 4 for Microsoft Windows 2000 Service Pack 4

"sunchangming" <snnn119@gmail.com> wrote:
> 我现在用的是64位的操作系统，并且一般只使用64位的IE 。
> 有如下两点好处：
> 1、原生的DEP支持。在上述案例中，只要开了DEP就没事儿。
> 2、没有flash。于是漏洞少了一半。
> 
> "Moses" <moses.mason@gmail.com> wrote:
>> [1] http://www.microsoft.com/technet/security/advisory/979352.mspx

Technical Details

Message-ID: <273@rixi.an>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!94.232.116.13.MISMATCH!feed.xsnews.nl!border-3.ams.xsnews.nl!weretis.net!feeder2.news.weretis.net!feeder.eternal-september.org!eternal-september.org!.POSTED!not-for-mail

References: <hirpj1$tke$1@www.shinco.com> <his8fb$vh7$1@www.shinco.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,GB
Path: arc1-ca.pugleaf.net!g2news1.google.com!news4.google.com!feeder3.cambriumusenet.nl!feed.tweaknews.nl!94.232.116.13.MISMATCH!feed.xsnews.nl!border-3.ams.xsnews.nl!weretis.net!feeder2.news.weretis.net!feeder.eternal-september.org!eternal-september.org!.POSTED!not-for-mail
From: "Cen" <Cen@rixi.an>
Newsgroups: cn.comp.internet,cn.comp.security,cn.fan
Subject: Re: 换64位吧
Date: Sat, 16 Jan 2010 21:00:51 +0800
Organization: Banrixian
Lines: 42
Message-ID: <273@rixi.an>
References: <hirpj1$tke$1@www.shinco.com> <his8fb$vh7$1@www.shinco.com>
Mime-Version: 1.0
Content-Type: text/plain;
 charset="gb2312"
Content-Transfer-Encoding: quoted-printable
Injection-Date: Sat, 16 Jan 2010 13:01:00 +0000 (UTC)
Injection-Info: feeder.eternal-september.org; posting-host="bV+WF1bRIpPnjUSsraH4Lg";
 logging-data="6270"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/X1J0zMQxr9cU6Vuzq+R000z0XhgdbeK0="
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
X-Newsreader: Microsoft Outlook Express 6.00.2900.5512
X-Unsent: 1
Cancel-Lock: sha1:lvYz9cPE1/LpDWPgpg9OYA0MFLc=
X-Priority: 3
X-MSMail-Priority: Normal

Reply to Parent Message