ASLR compatibility mode is active

ID PE022 Level ERROR Category Security

Description

The ASLR (address space layout randomization) mitigation compatibility mode is active, as the executable image base is set to the value less than 0xFFFFFFFF. This limits ASLR in mitigating memory corruption vulnerabilities.

Mitigation

If using Visual C++:

  • Do not change the default value of the image base for the executable. Make sure you do not pass the /BASE option to the linker when building the executable.

Arguments

This rule has the following output arguments:

  • image_base - Executable image base value