Can This Type of Windows ASLR Exploit Defeat PaX?

[ShellCode]

http://www.theregister.co.uk/2010/02/03 ... on_bypass/

Read about it there. Basically a JIT-spraying attack on Flash. Is this sort of thing doable against the Linux implementation of ASLR (whether it be PaX or not)?

[PaX Team]

http://www.theregister.co.uk/2010/02/03/microsoft_windows_protection_bypass/

Read about it there. Basically a JIT-spraying attack on Flash. Is this sort of thing doable against the Linux implementation of ASLR (whether it be PaX or not)?

of course it is, why wouldn't it be? also the whole 'new' attack is anything but, it's what you get when you allow a process to generate code at runtime, it may very well generate shellcode then. what one can do about it is to prevent the control flow transfer into it, but that requires some toolchain and JIT engine work.