GIAC
GCIA · Question #150
Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his program neat and…
The correct answer is C. Format string attack. See the full explanation below for the reasoning.
Question
Adam works as a Senior Programmer for Umbrella Inc. A project has been assigned to him to write a short program to gather user input for a Web application. He wants to keep his program neat and simple. His chooses to use printf(str) where he should have ideally used printf("%s", str). What attack will his program expose the Web application to?
Options
- ASequence++ attack
- BCross Site Scripting attack
- CFormat string attack
- DSQL injection attack
How the community answered
(26 responses)- A8% (2)
- B12% (3)
- C81% (21)
Community Discussion
No community discussion yet for this question.