GCIH · Question #184
Which of the following statements about buffer overflow are true? Each correct answer represents a complete solution. Choose two.
The correct answer is B. It is a situation that occurs when an application receives more data than it is configured to D. It can terminate an application. A buffer overflow occurs when an application receives more input data than its allocated buffer can hold, which can corrupt adjacent memory and cause the application to crash or terminate.
Question
Which of the following statements about buffer overflow are true? Each correct answer represents a complete solution. Choose two.
Options
- AIt is a situation that occurs when a storage device runs out of space.
- BIt is a situation that occurs when an application receives more data than it is configured to
- CIt can improve application performance.
- DIt can terminate an application.
How the community answered
(23 responses)- A4% (1)
- B87% (20)
- C9% (2)
Why each option
A buffer overflow occurs when an application receives more input data than its allocated buffer can hold, which can corrupt adjacent memory and cause the application to crash or terminate.
Running out of storage device space is a disk-full or storage-exhaustion condition, which is entirely unrelated to memory buffer overflow vulnerabilities.
A buffer overflow is specifically defined as a condition where a program writes more data to a fixed-length memory buffer than it was allocated to hold, causing data to overwrite adjacent memory regions.
Buffer overflows degrade or destroy application stability and security; they do not improve performance under any circumstance.
The memory corruption caused by a buffer overflow frequently leads to abnormal program termination - either through a segmentation fault triggered by the OS, or due to corrupted control flow data such as return addresses and function pointers.
Concept tested: Buffer overflow vulnerability definition and effects
Source: https://owasp.org/www-community/vulnerabilities/Buffer_Overflow
Topics
Community Discussion
No community discussion yet for this question.