PDA

View Full Version : AMD/ATI Video Drivers: Unsafe At Any Speed



wraggster
June 7th, 2012, 19:48
CERT/CC has called out AMD for having insecure video drivers (http://www.cert.org/blogs/certcc/2012/06/amd_video_drivers_prevent_the.html). AMD/ATI video drivers are incompatible with system-wide ASLR (http://blogs.technet.com/b/srd/archive/2010/12/08/on-the-effectiveness-of-dep-and-aslr.aspx?Redirected=true). 'Always On' DEP combined with 'Always On' ASLR (http://en.wikipedia.org/wiki/Address_space_layout_randomization) are effective exploit mitigations. However, most people don't know about 'Always On' ASLR since Microsoft had to hide it fromEMET (http://support.microsoft.com/kb/2458544) with an 'EnableUnsafeSettings' registry key — because AMD/ATI video drivers will cause a BSOD on boot if 'Always On' ASLR is enabled
http://tech.slashdot.org/story/12/06/07/1653206/amdati-video-drivers-unsafe-at-any-speed