WinXP SP2 still vulnerable to memory attacks

A security outfit in Russia is claiming to have found a means to overflowing memory in WinXP Service Pack 2, which is meant to have fixed this. Continuing evidence that Microsoft OSes are unsafe at any speed.

It was discovered by MaxPatrol team that it is possible to defeat Microsoft(R) Windows(R) XP SP2 Heap protection and Data Execution Prevention mechanism. As a result it is possible to implement:

* Arbitrary memory region write access (smaller or equal to 1016 bytes) Arbitrary code execution

* DEP bypass.

Link