Is AddVectoredExceptionHandler a replacement for SetUnhandledExceptionFilter?
Good comment: It is not [a replacement], the callback doesn't promise anything about the exception getting handled. That happens later. It is, at best, useful as a diagnostic tool to troubleshoot problems with a program that contains too many try/catch-em-all statements. Compare to the .NET AppDomain.FirstChanceException event, the kind of...
Stack overflow exploits: RET vs. SEH overwrite
security,stack-overflow,exploit,seh,hacking
It depends what is the vulnerability and what are the exploit conditions. If you can overwrite the RET and build a full blown exploit than you are correct and overwriting the SEH would is unnecessary. But this is not always the case .. In some cases RET overwrite protections will...
Vectored Exception Handling Process wide?
Yes, vectored exception handlers are process wide. From MSDN: An application can register a function to watch or handle all exceptions for the application. Vectored handlers are not frame-based, therefore, you can add a handler that will be called regardless of where you are in a call frame. New Vectored...