Critical Description
What was the activity?
We are using PROCRUN to run Java app as service. This is distributed across a network (more than 15,000). Our security team highlighted
Executables not compiled following best practices.
The application(s) and/or dll(s) are not compiled with
modern day OS controls such as: ASLR, NX, or DEP.
Although vulnerability was not discovered, if in the
future there is one, remote code execution may be
possible due to lack of operating system controls enabled
on these executables.
Is PROCRUN not compiled using DEP?
PS: This is a not configuration/support request.