This research is good research, though I'm skeptical that the techniques are going to be generally applicable. Finding the exploitable function is usually the easy part. How to get the data there is the hard part. However, the credibility of the paper is called into question with the implication that this is a Microsoft problem and that the solution is some convoluted DRM or patch secret knock process. This technique of reverse engineering vulnerabilities and then exploits from patch versions is one that is applicable to every vendor on every platform.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/11514/35046#35046