Platform Properties

Exploitation properties associated with a platform are meant to illustrate how easily a vulnerability may be exploited when a given platform configuration, such as the operating system or architecture, is used. For example, Windows 2000 does not include support for enforcing non-executable pages. This implies that any vulnerability found within an application that runs in the context of the Windows 2000 platform may be exploited more easily. An understanding of exploitation properties that are associated with a platform may be useful when attempting to assess the risk of applications that might run on multiple platforms. There are many other examples of exploitation properties that are tied to platforms. In order to limit the scope of this document, platform exploitation properties are not discussed at length.