Windows 8 heap randomization

Question

Does the heap randomization algorithm (for allocating heap memory) in windows 8 works both for 32 and 64 bit processes? or only for 64 bit processes?

Thanks!

Answer 1

Microsoft Windows Vista and later (32/64 bit) have a heap randomization algorithm.

It seems that Address Space Layout Randomization (ASLR) for 32 bit Windows may not be as robust as expected but Windows 8 32 bit ASLR has managed to mitigate some weaknesses in low memory situations.

ASLR is not enabled by default (e.g. Heap randomization in Windows and ASLR and Windows System DLLs for non-aware executables?).

For further details, refer to Black Hat USA 2012 - Windows 8 Heap Intervals