Design/Logic Flaw

2013-11-2915:55:00

PRIOn knowledge base

www.prio-n.com

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

JSON

Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming (ROP) attack.

CPENameOperatorVersion
enhanced_mitigation_experience_toolkitle3.0

CPE	Name	Operator	Version
	enhanced_mitigation_experience_toolkit	le	3.0

References

blogs.technet.com/b/srd/archive/2013/06/17/emet-4-0-now-available-for-download.aspx

en.nsfocus.com/advisories/1301.html

www.securitytracker.com/id/1029411