Chapter 10

Question 1

ShellCode

Answer 1

The custom code injected by an attacker and to which control is transferred as a result of the buffer overflow

Question 2

buffer overflow (aka buffer overrun or buffer overwrite)

Answer 2

A condition at an interface under which more input can be placed into a buffer or data holding area than the capacity allocated, overwriting other information. Attackers exploit such a condition to crash a system or to insert specially crafted code that allows them to gain control of the system.

Question 3

stack buffer overflow

Answer 3

occurs when the targeted buffer is located on the stack, usually as a local variable in a function’s stack frame. This form of attack is also referred to as stack smashing.

Question 4

The heap is

Answer 4

located above the program code and global data and grows up in memory