Feeds

MS downplays SP2 vuln risk

NX protection concern

  • alert
  • submit to reddit

Using blade systems to cut costs and sharpen efficiencies

Microsoft is downplaying the significance of research that suggests support for revamped memory protection in Win XP SP2 will fail to block a common type of security attack. Alexander Anisimov of Russian security firm Positive Technologies last week published a paper explaining how the data execution protection (DEP) and heap overflow protection features that debuted in Windows XP SP2 can be bypassed.

This execution protection (NX) technology - which is only supported by a limited number of processors including AMD K8, Intel Itanium and some Xeon processors - is designed to thwart buffer overrun attacks. Buffer overflows are a perennial source of software security problems that often feature in Windows security exploits. The infamous Sasser worm, for example, used a buffer overflow flaw in Windows' Local Security Authority Subsystem Service to spread.

Microsoft's NX protection is designed to make it more difficult for crackers to inject malicious code into memory but Positive Technologies' MaxPatrol security scanner research team found a chink in these defences, outlined in Anisimov's paper.

Positive Technologies said it discovered the problem in October 2004, notified Microsoft in December and went public last week. In a statement, Microsoft said that "early analysis" indicates that attempts to bypass its newly-introduced memory protection technology are "not a security vulnerability". It said it never claimed the technology was foolproof.

"An attacker cannot use this method by itself to attempt to run malicious code on a user’s system. There is no attack that utilizes this, and customers are not at risk from the situation," it said.

"It’s important to note that DEP and heap overflow protection are not designed to protect against all kinds of malicious code exploits. These features effectively address the exploits that they were designed to prevent and make it more difficult for an attacker to run malicious software on the computer as the result of a buffer overrun. We will continue to modify these technologies as appropriate to improve them and will evaluate ways to mitigate against this method of bypass while retaining performance on the system, either through an update as part of our monthly bulletin release process, or in a service pack," it adds.

Microsoft continues to urge customers to load Windows XP Service Pack 2 as a defence against security attacks. ®

Related stories

MS bigs up Windows XP SP2
Intel 'Nocona' Xeon to get 'no execute' support
WinXP SP2 = security placebo?
Exploit code attacks unpatched IE bug

Boost IT visibility and business value

More from The Register

next story
Secure microkernel that uses maths to be 'bug free' goes open source
Hacker-repelling, drone-protecting code will soon be yours to tweak as you see fit
14 antivirus apps found to have security problems
Vendors just don't care, says researcher, after finding basic boo-boos in security software
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Israel's Iron Dome missile tech stolen by Chinese hackers
Corporate raiders Comment Crew fingered for attacks
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
Four fake Google haxbots hit YOUR WEBSITE every day
Goog the perfect ruse to slip into SEO orfice
prev story

Whitepapers

Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Consolidation: The Foundation for IT Business Transformation
In this whitepaper learn how effective consolidation of IT and business resources can enable multiple, meaningful business benefits.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
Securing Web Applications Made Simple and Scalable
Learn how automated security testing can provide a simple and scalable way to protect your web applications.