VMware for Stephen Heap spray location allows for exploitation

Notices where this attachment appears

1. Embed this notice
   Will Dormann (wdormann@infosec.exchange)'s status on Tuesday, 15-Apr-2025 03:46:17 JST Will Dormann

   in reply to

   Upon further investigation, because that's how I am, I've confirmed that Hyper-V (on a completely different host system) behaves the same as VMware for me. The heap spray ends up at addresses to high to allow exploitation.

   But for Stephen, both VMware- and Hyper-V-based ICS systems start heap spraying low enough to allow exploitation.

   Neither one of us can figure out why this is the case.