English

Arabic Catalan Chinese Czech Danish Dutch English French German Greek Hebrew Hindi Hungarian Italian Japanese Korean Persian Polish Portuguese Romanian Russian Slovak Spanish Swedish Thai Turkish Ukrainian Vietnamese

Chinese

Definition Arabic Catalan Chinese Czech Danish Dutch English French German Greek Hebrew Hindi Hungarian Italian Japanese Korean Persian Polish Portuguese Romanian Russian Slovak Spanish Swedish Thai Turkish Ukrainian Vietnamese

Favorites

Advertising

layout randomization

Translation of "layout randomization" in Chinese

We couldn’t find this entry. Showing approximate results. Check your spelling or suggest adding this term to the dictionary.

布局随机化

Address space layout randomization (ASLR) makes this type of attack extremely unlikely to succeed on 64-bit machines as the memory locations of functions are random.

地址空间布局随机化 （ASLR）使这种攻击在64位平台上变得几乎不可能成功，因为所有函数的内存地址都是随机的。

However, an attacker could use them in conjunction with another vulnerability to bypass security features, such as Address Space Layout Randomization (ASLR).

然而，攻击者可以结合其他漏洞使用这些漏洞绕过内核地址空间布局随机化 （KASLR）等安全功能。

An attacker could combine this information disclosure vulnerability to bypass Address Space Layout Randomization (ASLR).

然而，攻击者可以结合其他漏洞使用此漏洞绕过地址空间布局随机化 （ASLR）等安全功能。

An attacker who successfully exploited it could bypass the Address Space Layout Randomization (ASLR) security feature, which helps protect users from a broad class of vulnerabilities.

然而，攻击者可以结合其他漏洞使用此漏洞绕过地址空间布局随机化 （ASLR）等安全功能。

A security feature bypass vulnerability exists when the Windows kernel fails to properly initialize a memory address, allowing an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass.

当 Windows 内核无法正确验证内存地址时，存在安全功能绕过漏洞，此漏洞允许攻击者检索信息并可能导致内核地址空间布局随机化 （KASLR）绕过。

A security feature bypass for Microsoft Edge exists as a result of how exceptions are handled when dispatching certain window messages, allowing an attacker to probe the layout of the address space and thereby bypassing Address Space Layout Randomization (ASLR).

当 Microsoft Edge 无法使用地址空间布局随机化 （ASLR）安全功能时，即存在安全功能绕过漏洞，此漏洞可能允许攻击者能够更可靠地预测给定调用堆栈中特定指令的内存偏移。

A security feature bypass exists when the JScript and VBScript engines fail to use the Address Space Layout Randomization (ASLR) security feature, allowing an attacker to more reliably predict the memory offsets of specific instructions in a given call stack.

A security feature bypass for Internet Explorer exists as a result of how exceptions are handled when dispatching certain window messages, allowing an attacker to probe the layout of the address space and thereby bypassing Address Space Layout Randomization (ASLR).

在调度某些窗口消息时，Microsoft Edge 的安全功能绕过会作为异常处理方式的结果而存在，允许攻击者探查地址空间的布局，从而绕过地址空间布局随机化 （ASLR ）。

An attacker who successfully exploited this vulnerability could bypass the Address Space Layout Randomization (ASLR) security feature, which helps protect users from a broad class of vulnerabilities.

Operating systems and users can use the following strategies to reduce the risk of privilege escalation: Data Execution Prevention Address space layout randomization (to make it harder for buffer overruns to execute privileged instructions at known addresses in memory) Running applications with least privilege (for example by running Internet Explorer with the Administrator SID disabled in the process token) in order to reduce the ability of buffer overrun exploits to abuse the privileges of an elevated user.

操作系统和用户可以使用以下策略降低特权提升的风险：数据执行保护位址空間配置隨機載入（使缓冲区溢出更难在内存中找到已知地址来执行特权指令）运行的应用程序采用最小权限原则（例如不使用管理员SID运行Internet Explorer）从而减少缓冲区溢出exploits滥用高级用户特权的可能性。

A security feature bypass vulnerability exists when the Windows kernel fails to properly validate a memory address, allowing an attacker to retrieve information that could lead to a Kernel Address Space Layout Randomization (KASLR) bypass. An attacker who successfully exploited this vulnerability can then retrieve the base address of cng.sys from a compromised process.

Win32k 特权提升漏洞 - CVE-2015-0078 当内核模式驱动程序无法正确验证调用线程令牌时，会导致 Windows 内核模式驱动程序中存在特权提升漏洞。成功利用此漏洞的已经过身份验证的攻击者可以获得管理员凭据，并使用这些凭据提升特权。