Talk:Virtual machine escape

This article is rated Start-class on Wikipedia's content assessment scale.
It is of interest to the following WikiProjects:

Computer security: Computing Low‑importance

This article is within the scope of WikiProject Computer security, a collaborative effort to improve the coverage of computer security on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.Computer securityWikipedia:WikiProject Computer securityTemplate:WikiProject Computer securityComputer security

Low This article has been rated as Low-importance on the project's importance scale.

This article is supported by WikiProject Computing (assessed as Low-importance).

Things you can help WikiProject Computer security with:

How you can help:

Add to your watchlist the project talk page! Post there for help with articles or to suggest articles that need work.
Request editing suggestions on your talk page by entering WikiProject_Computer_security into this template.
Check the article alerts to participate in deletion discussions, review Good Article nominees, and review draft articles.
Edit any articles that interest you. Recommended:
- Most popular articles that need the most work (last refreshed 28 June 2026)
- Popular articles (monthly top articles by views)
- High-importance stub-quality articles
- High-importance start-quality articles
- Mid-importance stub-quality articles
- Mid-importance start-quality articles
- Unknown-importance stub-quality articles
- Unknown-importance start-quality articles
Review changes to popular articles or changes to talk pages.
Replace deprecated archival service links.
Recategorize articles in Category:Security to more specific categories
Fix something on the list of articles that need cleanup, including:
- Clarification needed
- Rewrite needed
- Expansion needed
- Style editing needed
- Update needed
- Orphaned (add links from other articles to these articles)
- Conflict of interest
- Original research
- Promotional tone
- Biographies of living persons (BLP) articles lacking sources
- Cites no sources
- Cites unreliable sources

Of the 3624 articles in this project 1993 or 55% are marked for cleanup, with 4041 issues in total.

Editing resources:

Computing: Software / Security Low‑importance

This article is within the scope of WikiProject Computing, a collaborative effort to improve the coverage of computers, computing, and information technology on Wikipedia. If you would like to participate, please visit the project page, where you can join the discussion and see a list of open tasks.ComputingWikipedia:WikiProject ComputingTemplate:WikiProject ComputingComputing

Low This article has been rated as Low-importance on the project's importance scale.

This article is supported by WikiProject Software (assessed as Low-importance).

This article is supported by WikiProject Computer security (assessed as Low-importance).

Things you can help WikiProject Computer security with:

How you can help:

Add to your watchlist the project talk page! Post there for help with articles or to suggest articles that need work.
Request editing suggestions on your talk page by entering WikiProject_Computer_security into this template.
Check the article alerts to participate in deletion discussions, review Good Article nominees, and review draft articles.
Edit any articles that interest you. Recommended:
- Most popular articles that need the most work (last refreshed 28 June 2026)
- Popular articles (monthly top articles by views)
- High-importance stub-quality articles
- High-importance start-quality articles
- Mid-importance stub-quality articles
- Mid-importance start-quality articles
- Unknown-importance stub-quality articles
- Unknown-importance start-quality articles
Review changes to popular articles or changes to talk pages.
Replace deprecated archival service links.
Recategorize articles in Category:Security to more specific categories
Fix something on the list of articles that need cleanup, including:
- Clarification needed
- Rewrite needed
- Expansion needed
- Style editing needed
- Update needed
- Orphaned (add links from other articles to these articles)
- Conflict of interest
- Original research
- Promotional tone
- Biographies of living persons (BLP) articles lacking sources
- Cites no sources
- Cites unreliable sources

Of the 3624 articles in this project 1993 or 55% are marked for cleanup, with 4041 issues in total.

Editing resources:

Examples (Preferably documented)

Latest comment: 10 years ago1 comment1 person in discussion

ZSNES recently had a patch to block it from running x86 code. It's a 65816-based-SNES emulator so has no business running native code, obviously. https://www.youtube.com/watch?v=Q3SOYneC7mU
VMWare also recently made a patch but that was already mentioned.
Java has multiple patches for this. One of the oldest was the one where a method (collection of VM-executable bytecode) could have a negative value (signed) size, but that the actual data was 65533 bytes (unsigned). This was fixed around 2003 I think. A list of several exploits: https://cyberoperations.wordpress.com/offense/06-metasploit-basics-attacking-java/ This is a more recent one: http://timboudreau.com/blog/The_Java_Security_Exploit_in_(Mostly)_Plain_English/read
I left out code like that used for JPEG decoding since that is not generally considered any kind of virtualization. It's just a compressor. Compression, encryption, and sim/emulation all share quite a bit in common, though.
73.181.82.26 (talk) 06:23, 4 September 2015 (UTC)Reply

This page was redesigned at the edge.

Examples (Preferably documented)