CVE-2013-6791 Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection....
MediumCVSS 4.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Enhanced Mitigation Experience Toolkit (EMET) before 4.0 uses predictable addresses for hooked functions, which makes it easier for context-dependent attackers to defeat the ASLR protection mechanism via a return-oriented programming (ROP) attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft enhanced mitigation experience toolkit | <= 3.0 | No fix listed |
References
- blogs.technet.com patch
- en.nsfocus.com
- 1029411 vdb-entry