, SecurityFocus 2005-06-13
Software attack tools that turn PCs into remotely controlled zombies are getting better, but defenses are not keeping up, say security experts.
Expand all |
Post comment
Stealthy Trojan horses, modular bot software dodging defenses
2005-06-14
Anonymous (1 replies)
Anonymous (1 replies)
Buffer overflows come from clicking links on websites and from Active X, Javascript and from internet enabled software which has undefined RAM buffer lengths, so that if the hacker codes extra commands into the link you expected, the extra code overwrites valid memory errors -- the vulnerabilities that everyone talks about. So you would be less vulnerable to regular viruses and trojans, but by no means invulnerable. The buffer overflow often directs your computer to download more programs and write them to your drive somewhere other than your cache. The registry restriction helps, limiting additions to start-up processes, but file replacement is still possible, especially dll proxy which puts a dll in the root directory of the program, making it available first instead of the dll in the intended Windows folder. Feel safe?
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/articles/11209/32028#32028