In the interest of securing platforms, we desire to remove msvcr71.dll entirely from systems. This legacy file has been used in multiple exploits as it is a prime candidate for mining gadgets in ROP type attacks.
I see that even the latest versions of PowerBuilder seem to depend on this legacy file. msvcr100.dll is also included, however. I find it confusing that 2 different versions of the C Runtime are required.
Is it possible to use, build, and deploy applications with PowerBuilder using only the msvcr100.dll version of the C Runtime?
Alternatively, if there is a way to enforce ASLR on the msvcr71.dll can that be done through PowerBuilder?