Tuesday, February 1, 2005

Security update defeated

A Russian security company claims it found <A HREF="http://news.zdnet.com/2100-1009_22-5555448.html?tag=nl.e589">a way to beat a security measure</A> in Microsoft's Windows XP Service Pack 2, a major update aimed at securing customers' PCs. The SP2 measure, known as Data Execution Protection, is intended to prevent would-be attackers from inserting rogue code into a PC's memory and tricking Windows into running the program. However, in a paper published Friday, Moscow-based Positive Technologies said two minor mistakes in the implementation of the technology allow a knowledgeable programmer to sidestep the protection.

News Timeline



From Our Sponsor