Sysinternals Homepage
Forum Home Forum Home > Windows Discussions > Malware
  New Posts New Posts RSS Feed - Buffer Overrun protection software??
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Buffer Overrun protection software??

 Post Reply Post Reply
Author
Message
redhawk View Drop Down
Moderator Group
Moderator Group
Avatar

Joined: 14 September 2005
Location: United Kingdom
Status: Offline
Points: 1357
Post Options Post Options   Thanks (0) Thanks(0)   Quote redhawk Quote  Post ReplyReply Direct Link To This Post Topic: Buffer Overrun protection software??
    Posted: 12 February 2009 at 11:31am
No one likes getting malware and one dirty method of infection is by something known as buffer overrun exploits.
So I did some searching and found software that claims to protect your PC against most known types of buffer overruns.
I took the opportunity to test out 2 products: BufferShield and Comodo Memory Firwall.
I browsed online visited dubious web sites but not once did I get hit by a buffer overrun exploit (perhaps I should have been using IE).
So how can I test software if I don't have anything to generate buffer overruns.
Fortunately both programs come with their own checking utility, Comodo - BO Tester and BufferShield - DEP Test.
As you would expect the test programs supplied by their own vendor indicates full protection however testing them against rival software shows neither provided protection - ironic isn't it??

So I'm wondering is buffer overrun protection a marketing gimmick or does it have a real place in terms of malware protection??

Richard S.

Edited by redhawk - 12 February 2009 at 2:01pm
Back to Top
brunildo View Drop Down
Newbie
Newbie


Joined: 12 February 2009
Status: Offline
Points: 1
Post Options Post Options   Thanks (0) Thanks(0)   Quote brunildo Quote  Post ReplyReply Direct Link To This Post Posted: 12 February 2009 at 11:40am
You can try it by yourself!

Ptr := Pointer( LocalAlloc( LMEM_ZEROINIT, 10 ) );
CopyMemory( Ptr, PChar( 'testing a memory with more then 10 bytes long' ), 45 );
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down