Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: PointGuard: It's not the Size of the Buffer, it's the Address of the Pointer
From: Florian Weimer <fw () deneb enyo de>
Date: Fri, 15 Aug 2003 15:43:42 +0200

Crispin Cowan <crispin () immunix com> writes:

Thanks to Snax and the Shmoo for a better tag line: It's not the Size
of the Buffer, it's the Address of the Pointer

This is not true.  There are buffer overflow exploits which do not
modify pointers, but other objects.  The most prominent example is
probably the "c c c c c..." exploit for the Solaris /bin/login
vulnerability.


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]