Windows Segment Heap - Attacking the VS Allocator

Windows Segment Heap - Attacking the VS Allocator

Explore the intricacies of Windows Segment Heap and learn how to exploit heap overflows by manipulating the VS allocator metadata in this 48-minute conference talk from Ekoparty 2022. Delve into Microsoft's new heap implementation introduced in early Windows 10 versions, designed to mitigate and prevent allocator metadata abuse. Discover techniques to circumvent implemented security measures, with a specific focus on targeting the VS allocator, a primary component of the segment heap. Gain insights from Varnavas, a Security Researcher at Blue Frost Security, as he shares his expertise on working around mitigations and exploiting vulnerabilities in this critical Windows component.