Vulnerability Development: Where else?

[Hung Vu <hungvu () netcom ca>]

To execute arbitrary code on a system one can overwrite:
        - Return addresses on the stack
        - function pointers
        - Longjump buffers
        - GOT tables
        - Dtors
        - _atexit stuff 
        - GLibc hooks

Where else?

Hung.