Linked by Thom Holwerda on Mon 18th Jan 2010 22:00 UTC
Internet Explorer Ah, the security vulnerability that was used in the Google attack. It's been around the internet about a million times now, and even governments have started advising people to move away from Internet Explorer. As is usually the case, however, the internet has really blown the vulnerability out of proportion. I'll get right to it: if your machine and/or network has been compromised via this vulnerability, then you most likely had it coming. No sympathy for you.
Permalink for comment 404774
To read all comments associated with this story, please click here.
umccullough
Member since:
2006-01-26

Even if you're running XP SP3, real DEP requires NX, which of course means that you need to be running on a PAE configuration.

For x86-32, at least. Nothing extra is necessary on x86-64. But there is still a sizable population of earlier x86 hardware out there that cannot be protected.


I had been told at one point that Win XP does always enable PAE mode in order to utilize the NX, but it doesn't use the higher memory extensions unless explicitly told to in the boot.ini - I could be wrong, but I heard it from someone I generally trust on these matters.

Edit: Wikipedia seems to back this notion up in the foot notes - http://en.wikipedia.org/wiki/Physical_Address_Extension

Your point about DEP not working on older x86 hardware is indeed valid of course, and I have plenty of said hardware still plugging along myself.

Edited 2010-01-18 22:57 UTC

Reply Parent Score: 3