Attack:
https://www.exploit-db.com/docs/english/17505-structured-exception-handler-exploitation.pdf
Defense:
https://support.microsoft.com/en-us/help/956607/how-to-enable-structured-exception-handling-overwrite-protection-sehop
References:
https://www.symantec.com/security_response/attacksignatures/detail.jsp?asid=61000
https://www.rapid7.com/resources/structured-exception-handler-overwrite-explained/ (Watch it)
No comments:
Post a Comment