3 ms·
Just one counter-example: IIS runs parts on kernel mode (at least until last year when I last checked.) Parsing HTTP on kernel mode sounds very bad. How many v
by alecco 16y ago
Just one counter-example: IIS runs parts on kernel mode (at least until last year when I last checked.) Parsing HTTP on kernel mode sounds very bad. How many vulnerabilities were last year for IIS alone?
- tptacek 16y ago(a) Funny you should ask. In the past year, there's one published advisory (kingcope's DOS) on IIS7, and 3 on Apache. (b) In neither IIS 6 nor IIS 7 have any of those published advisories granted attackers kernel access of any sort. In fact: find me the last IIS vulnerability that did give up the kernel. I bet you can't.
- deleted 16y ago[deleted]