SafeSEH check for Plex

Document ID : KB000112389
Last Modified Date : 29/08/2018
Show Technical Document Details
Introduction:
Security Team was running Microsoft's "Safe Structured Exception Handling" (SafeSEH) tests which reports  SafeSEH:False for some CA PLEX DLLs, Why?

Sample Report output:
...
ARCH      : I386
ASLR       :True
DEP         :True
SafeSEH : False
Question:
Why have some CA PLEX DLLs status FALSE for SafeSEH checks?
Environment:
CA PLEX 7.2.1, Windows 7, Windows 10
Answer:
SafeSEH option is disabled for incompatible modules, as those modules has dependencies with other modules (e.g. Third Parties) which were built with older version of the C++ compiler. In Plex r7.2.1, compiler upgraded from Visual Studio 2005 to Visual Studio 2013, due to not getting all dependencies built with latest compiler left us to build those modules in /SafeSEH:No option.