CF Guard address taken IAT entry table not readonly

ID PE125 Level ERROR Category Security

Description

Control Flow guard address taken IAT entry table is not placed in a read-only section. This section must not be writable, executable, or shared.

Mitigation

  • Make sure you are not merging sections with different memory access attributes.
  • Do not explicitly change memory attributes. If doing so, do not mark a section with the CF address taken IAT entry table.

If using Visual C++:

Arguments

This rule has the following output arguments:

  • section - Affected section name