邪恶八进制信息安全团队技术讨论组's Archiver

EvilOctal 2005-9-2 21:30

[转载]Intel 915芯片组内置Execute-Disable Bit capability与某些第三方软件冲突

文章作者:Junxiu Lee

Intel 915芯片组内置的Execute-Disable Bit capability与某些第三方软件发生冲突症状描述:
安装第三方防火墙软件CyberArmor后,系统启动蓝屏,具体信息如下:

STOP: c000021a (Fatal System Error)
The Windows Logon Process System process terminated unexpectedly with a status of 0xc0000005 (0x0000000 0x00000000). The system has been shut down.

通过安全模式进入系统后,卸载该软件后,症状消失,可以正常进入系统。

解决方案:
进入BIOS Setup |Advanced | CPU Features |找到与 "XD Bit functionality"相关的选项,将其设置为Disabled。

原因分析:Execute-Disable Bit capability是 Intel 915芯片组中新增的安全特性。

Execute-Disable Bit capability is a robust hardware feature, detectable using the CPUID instruction, that protects against malicious software executing code on IA-32 systems. Fundamental software support for this capability includes enabling Physical Address Extension (PAE) functionality and defining a memory-protection policy that is granular down to the page level.

More info,see [url]http://www.intel.com/cd/ids/developer/apac/zho/149308.htm[/url]

页: [1]
© 1999-2008 EvilOctal Security Team