GCIH Question #184: Real Exam Question with Answer & Explanation

The correct answer is B: It is a situation that occurs when an application receives more data than it is configured to. A buffer overflow occurs when an application receives more input data than its allocated buffer can hold, which can corrupt adjacent memory and cause the application to crash or terminate.

Vulnerability Exploitation & Privilege Escalation

Question

Which of the following statements about buffer overflow are true? Each correct answer represents a complete solution. Choose two.

Options

AIt is a situation that occurs when a storage device runs out of space.
BIt is a situation that occurs when an application receives more data than it is configured to
CIt can improve application performance.
DIt can terminate an application.

Explanation

A buffer overflow occurs when an application receives more input data than its allocated buffer can hold, which can corrupt adjacent memory and cause the application to crash or terminate.

Common mistakes.

A. Running out of storage device space is a disk-full or storage-exhaustion condition, which is entirely unrelated to memory buffer overflow vulnerabilities.
C. Buffer overflows degrade or destroy application stability and security; they do not improve performance under any circumstance.

Concept tested. Buffer overflow vulnerability definition and effects

Reference. https://owasp.org/www-community/vulnerabilities/Buffer_Overflow

Topics

#buffer overflow#memory corruption#application vulnerability#input validation

Community Discussion

No community discussion yet for this question.

Full GCIH Practice