CISSP Domain 3: Memory Protection

Question 1

What’s buffer overflow?

Answer 1

• exists when a developer does not validate user input to ensure that it is of an appropriate size
• allows input which is too large, which then overlfows memory buffer
• prevented with input validation