CreateRemoteThread returning Access Denied

253 views
Skip to first unread message

Richard Russell

unread,
Jul 23, 2010, 4:21:55 AM7/23/10
to
CreateRemoteThread is returning Access Denied when run under 64-bit
Windows 7, but works without error when the identical (32-bit)
binaries are run under 32-bit Windows 7.

I should emphasise that this isn't a case of a 32-bit process trying
to create a thread in a 64-bit process, or vice versa. Both processes
are 32-bits, running under WoW64.

Other functions accessing the remote process, such as VirtualAllocEx
and WriteProcessMemory, are apparently working correctly; it's only
CreateRemoteThread that fails. Is there a workaround for this issue?

Richard.
http://www.rtrussell.co.uk/

mlcar...@gmail.com

unread,
Sep 7, 2013, 12:21:20 PM9/7/13
to
Richard

Did you find a solution for this problem?

Marcus

Arunpreet Singh

unread,
Oct 21, 2014, 11:57:00 PM10/21/14
to
It might be a session issue,you can't use CreateRemoteThread to create thread inside process that is in diffrent session ,Try using undocumented API NtCreateThreadEx .

More Information
http://securityxploded.com/ntcreatethreadex.php

Thanks
Arun
Reply all
Reply to author
Forward
0 new messages