Format String Vulnerabilities

Question 1

Format String Vulnerability

Answer 1

We have a format string vulnerability if submitted data of an input string is evaluated as a command by the printf processing function.

Question 2

What is the Write-What-Where format of a format string vulnerability?

Answer 2

%value%offset(or address if known)\%n(or lln, hn, hhn depending on size)