Windows系统下RPC堆溢出的研究  

The Research of RPC Heap Overflow of Windows System

作　　者：孙晓妍[1] 武东英[1] 季明[1] 郭宁[1] 

机构地区：[1]解放军信息工程大学信息工程学院,河南郑州450002

出　　处：《微电子学与计算机》2007年第6期170-172,175,共4页Microelectronics & Computer

摘　　要：RPC溢出漏洞成为Windows系统安全的巨大威胁。介绍了RPC的原理,研究了RPC中Stub的数据构造和标准,分析了堆结构和堆溢出原理,总结了堆溢出漏洞的利用方法,针对一个RPC堆溢出漏洞分析了利用过程,提出了RPC堆溢出漏洞攻击的防范措施。The R.PC heap overflow vulnerability has been a great threat to Windows operating system. In this paper the principles of RPC are introduced, the Stub data construction and the NDR syntax are also analyzed. Then this paper emphasizes on the heap structures and the principles of heap overflow analyzing, it also concludes the exploit methods of heap overflow. In allusion to a new vulnerability it analyzes the RPC heap overflow vulnerability exploit, and brings forward the preventive measures.

关 键 词：RPC NDR STUB 堆溢出 

分 类 号：TP316.7[自动化与计算机技术—计算机软件与理论] TP309.5[自动化与计算机技术—计算机科学与技术]