Sunday, October 26, 2014
Search
  
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Panasonic to Offload Sanyo's North America TV Business
Google's Pichai to Become Head of Product at Google: report
Internet Explorer 11 Toolkit Allows Enterprise Admins "Spy" On Their Employees
FCC Says Airwave Auction To Delay Until 2016
HP Broadens Moonshot Portfolio With Intel-powered Models
Microsoft To Keep Nokia Brand For Low-end Smartphones
LG Introduces Its First Octa-Core Application Processor
Cloud and Surface 3 Drive Microsoft's Revenue
Active Discussions
Copied dvd's say blank in computer only
How to generate lots of different CDs quickly
Yamaha CRW-F1UX
help questions structure DVDR
Made video, won't play back easily
Questions durability monitor LCD
Questions fungus CD/DVD Media, Some expert engineer in optical media can help me?
CD, DVD and Blu-ray burning for Android in development
 Home > News > Graphics Cards > AMD Dri...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, June 08, 2012
AMD Drivers Prevent Microsoft's Security Feature


AMD's video drivers prevent Microsoft's Exploit Mitigation Experience Toolkit (EMET) from operating correctly, potentially leaving systems valnuarable to attacks, US Computer Emergency Readiness Team (US-CERT) said today.

Acording to CERT's report, AMD's drivers are not fully compatible with a vulnerability mitigation feature called Address Space Layout Randomization (ASLR). ASLR serves to make it harder for software vulnerabilities to be exploited by randomizing certain program structures in memory, so that the addresses of these structures cannot reliably be predicted and attacked.

ASLR was introduced first in Windows Vista as a per-program feature that is only enabled with applications that are flagged as being compatible. However, specific requiring higher security can use the Enhanced Mitigation Experience Toolkit (EMET) to enable ASLR across the system, which activates ASLR for all programs. According to US-CERT, AMD's video drivers are not ASLR compatible. Turning on ASLR will cause AMD's drivers to crash (BSOD), making always-on ASLR unusable on systems using AMD's drivers.

"The interesting impact of this incompatibility is that Microsoft Windows systems that have an AMD or an ATI video chip cannot be secured as well as systems with video chips that have ASLR-compatible drivers," CERT said in a blog post. "In other words, environments that require the utmost security against attacks should avoid AMD/ATI video cards until the drivers support system-wide ASLR."

AMD said that the non-default settings used to produce the system crash at start-up as reported by CERT require changing a System Registry key for the tool, which was not documented until the CERT report was published, and is not accessible through the EMET tool itself.

Users of AMD graphics products will face the problem outlined by the CERT report if their EMET settings are modified, and will otherwise not experience the issue in question, according to AMD. The company will also release a driver designed to ensure that a crash does not take place under the conditions outlined by CERT.


Previous
Next
Google Defends Its Search Policies        All News        Europe: Google Should Respond To Antitrust Concerns By July
AMD Launches Next-Generation AMD FirePro Graphics Card     Graphics Cards News      AMD Releses OpenCL 1.2 Solution For App Developers

Get RSS feed Easy Print E-Mail this Message

Related News
AMD Sales May Miss Estimates, New CEO Announces Restructuring
AMD Appoints Lisa Su as President and Chief Executive Officer
AMD To release Carrizo Notebook APUs Next Year
AMD Demonstrates Network Function Virtualization Solution on 64-Bit Embedded R-Series SoC
AMD To Showcase ARM Cortex-A57-Based Hadoop on Opteron Processors
AMD Moves Closer To The Introduction Of Project FreeSync Monitors
AMD Introduces DirectGMA on AMDs FirePro GPUs
AMD Launches AMD Radeon R9 285 Graphics, "Never Settle: Space Edition" Game Bundle
AMD Introduces New 8-core FX-series Processors
AMD Announces Heterogeneous C++ AMP Language for Developers
New AMD R9 285 Radeon Graphics Card Unveiled
AMD Officially Releases The OCZ-rebranded, Radeon R7 SSDs

Most Popular News
 
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2014 - All rights reserved -
Privacy policy - Contact Us .