CAJ | 학술논문

Windows堆管理器是一个用于动态分配内存的子系统。堆溢出是指在动态分配堆内存过程中堆块块首中的前向指针和后向指针被上一堆块中的溢出数据修改，这样在被溢出堆块被分配时可转去执行恶意代码。微软针对这种堆溢出提出了一系列安全机制，先简要叙述这一系列安全机制的工作原理，然后分析了这些安全机制存在的弱点，并对利用这些弱点绕过安全机制的可能性做了简要的分析。
Windows퇴관리기시일개용우동태분배내존적자계통。퇴일출시지재동태분배퇴내존과정중퇴괴괴수중적전향지침화후향지침피상일퇴괴중적일출수거수개，저양재피일출퇴괴피분배시가전거집행악의대마。미연침대저충퇴일출제출료일계렬안전궤제，선간요서술저일계렬안전궤제적공작원리，연후분석료저사안전궤제존재적약점，병대이용저사약점요과안전궤제적가능성주료간요적분석。
The Windows Heap Manager is a sub-system used for dynamic allocation of the memory. Heap overflow refers to that the forward and backward pointers of the heap chunk are overwritten by the data of the previous chunk. Microsoft proposes a series of security mechanisms for preventing the heap overflow. This paper first gives a brief description of this series of protection mechanisms ; then analyzes the weakness of these protection mechanisms, and finally discusses the exploitation possibility.