Bottom-Up ASLR Exploit Blocked in Windows XP

[hake]

I never expected to see this.  Bottom-Up ASLR protection is clearly worth having in Windows XP.

MBAE 1.12.1.109 is in active use.  Mozilla Firefox 45.9 was running inside Sandboxie 3.76.  The Firefox process was instantly terminated.

interventions by MBAE are very rare on my Windows XP SP3 system or any other of my Windows systems for that matter.  I am reassured that MBAE is prowling usefully in the backgound.

Would it be fair to say that malware developers would not expect to encounter Bottom-up ASLR protection in this venerable operating system?  I don't claim to have configured the most hardened XP system extant but the battlefield is littered with mines and booby traps.  There are numerous layers of defence.

Edited October 19, 2019 by hake

[exile360]

Very cool, thanks for posting  

Yep, like you, I rarely see blocks from Anti-Exploit, but knowing it's there and knowing what it does is quite reassuring.  It's by far one of the most powerful and forward thinking additions to Malwarebytes.