Windows DLLs should get marked with DEP and ASLR flags.

PEFlags is a command-line tool, which allows the setting of the DEP and ASLR flags of the PE header of binary files. So Windows applications and DLLs can use Data Execution Prevention and Adress Space Layout Randomisation and make attacks on vulnerabilities more difficult. peflags is contained in the Cygwin rebase package. A direct download is possible from: http://download.videolan.org/pub/videolan/contrib/peflags.c .

To mark a file or dll it is needed to call "peflags --dynamicbase=true --nxcompat=true <FILE>" e.g. as a post build step.