[TH] With Sinofsky Gone, Start Menu Could Return to Windows 8 - Page 20

Microsoft Windows
Microsoft's Windows Vista (released January 2007), Windows Server 2008, Windows 7, and Windows Server 2008 R2 have ASLR enabled by default, although only for those executables and dynamic link libraries specifically linked to be ASLR-enabled.[8] This did not include Internet Explorer 7 on Windows Vista prior to Service Pack 1; ASLR and Data Execution Prevention (DEP) are both disabled for application compatibility purposes.[9] Newer versions, including Internet Explorer 8 (released March 2009), enable these protections. A registry setting to forcibly enable or disable ASLR for all executables and libraries is found at "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\MoveImages".[10] ASLR can be disabled in Windows 7, by using the Enhanced Mitigation Experience Toolkit provided by Microsoft, (the MoveImages registry setting has no effect in Windows 7[citation needed]).
The locations of the heap, stack, Process Environment Block, and Thread Environment Block are also randomized. A security whitepaper from Symantec noted that ASLR in 32-bit Windows Vista may not be as robust as expected, and Microsoft has acknowledged a weakness in its implementation.[11]
Host-based intrusion prevention systems such as WehnTrust[12] and Ozone[13] also offer ASLR for Windows XP and Windows Server 2003 operating systems; however complete details of their implementation are not available.[14]
It was noted in February 2012[15] that ASLR on 32bit Windows systems prior to Windows 8 can have its effectiveness reduced in low memory situations.


Go to Wikipedia and do reading.