Newsletter Archives

US-CERT Warns of ASLR Implementation Flaw in Windows 8/8.1 and Windows 10

Posted on November 21, 2017 at 13:28 CST by PKCano • Comment in the Forums

The U.S. Computer Emergency Readiness Team is warning of a vulnerability in Microsoft’s implementation of Address Space Layout Randomization that affects Windows 8, Windows 8.1 and Windows 10. The vulnerability could allow a remote attacker to take control of an affected system.

Microsoft said it is investigating the matter.

Address Space Layout Randomization (ASLR) is championed as a system hardening technology used in most major desktops and mobile operating systems. ASLR is used to thwart memory-based code-execution attacks. iOS, Android, Windows, macOS and Linux each use ASLR to keep systems safer.

Read the complete warning here.

Catalin Cimpanu on bleepingcomputer.com offers a further explanation of the vulnerability and a workaround until Microsoft provides the fix.

@MrBrian first brought this to our attention on Novemver 17, 2017.
Please Click here to Comment in the Lounge

Other, Windows Patches/Security ASLR, US-CERT, Windows 10, Windows 8/8.1, Windows vulnerability

Plus Membership

Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.

AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.

Welcome to our unique respite from the madness.

It's easy to post questions about Windows 11, Windows 10, Win8.1, Win7, Surface, Office, or browse through our Forums. Post anonymously or register for greater privileges. Keep it civil, please: Decorous Lounge rules strictly enforced. Questions? Contact Customer Support.

S	M	T	W	T	F	S
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30

Newsletter Archives

US-CERT Warns of ASLR Implementation Flaw in Windows 8/8.1 and Windows 10

Plus Membership

Search Newsletters

Search Forums

View the Forum

Search for Topics

Recent Topics

Recent blog posts

My Profile

Key Links

Remembering Woody

Newsletter Archives

US-CERT Warns of ASLR Implementation Flaw in Windows 8/8.1 and Windows 10

Plus Membership

Search Newsletters

Search Forums

View the Forum

Search for Topics

Recent Topics

Recent blog posts

My Profile

Login and Registration

Key Links

Remembering Woody