May 2007 - Posts

More on Exception Handlers

Sitting here at "Blue Hat" watching David Maynor present – pretty cool working for a company that can host its own security conference just to educate employees… A comment just came in that was a good question, and deserves a detailed answer – Arkon asked: Read More...

Posted 10 May 07 11:55 by david_leblanc | 2 Comments   

New File Converter Coming Soon

You might have recently heard something about the new "Microsoft Office Isolated Conversion Environment", a tool we are providing to help protect Office 2003 users from malicious content in Office files. You might be asking yourself what it is, and why Read More...

Posted 08 May 07 01:15 by david_leblanc | 11 Comments   

Is it a Read, Write or Execute AV?

I didn't find this documented in the Visual Studio documentation, but it is in the latest Windows SDK. In case anyone was interested, and would like to be able to tell from inside an app whether an AV was triggered by NX, this will do it: DWORD FilterFunc( Read More...

Posted 01 May 07 03:59 by david_leblanc | 1 Comments   

Search

This Blog

• Home
• About
• Email

Tags

• Development
• Integer Overflows
• Office Crypto
• Other
• Secure Development
• Security Misc
• Vulns

Archives

• July 2009 (1)
• May 2009 (1)
• February 2009 (1)
• January 2009 (2)
• December 2008 (3)
• November 2008 (2)
• October 2008 (1)
• September 2008 (4)
• July 2008 (2)
• June 2008 (2)
• April 2008 (4)
• March 2008 (2)
• February 2008 (7)
• January 2008 (7)
• December 2007 (3)
• November 2007 (1)
• October 2007 (5)
• September 2007 (3)
• August 2007 (4)
• July 2007 (7)
• June 2007 (1)
• May 2007 (3)
• April 2007 (11)
• March 2007 (7)

Syndication

• RSS 2.0
• Atom 1.0