nerdexam
GIAC

GCIH · Question #5

Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the…

The correct answer is B. Stack based buffer overflow C. Heap based buffer overflow. Buffer overflows are classified by the memory region they target - stack-based exploits the call stack and heap-based exploits dynamically allocated memory. These are the two primary, well-recognized categories in security research and exploit development.

Vulnerability Exploitation & Privilege Escalation

Question

Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the variable was designed to hold. Which of the following are the two popular types of buffer overflows? Each correct answer represents a complete solution. Choose two.

Options

  • ADynamic buffer overflows
  • BStack based buffer overflow
  • CHeap based buffer overflow
  • DStatic buffer overflows

How the community answered

(20 responses)
  • A
    5% (1)
  • B
    95% (19)

Why each option

Buffer overflows are classified by the memory region they target - stack-based exploits the call stack and heap-based exploits dynamically allocated memory. These are the two primary, well-recognized categories in security research and exploit development.

ADynamic buffer overflows

'Dynamic buffer overflow' is not a recognized technical classification - buffer overflows are categorized by memory region (stack or heap), not by dynamic versus static allocation.

BStack based buffer overflowCorrect

Stack-based buffer overflows occur when a program writes beyond the bounds of a stack-allocated buffer, potentially overwriting the saved return address and allowing an attacker to redirect code execution to arbitrary shellcode. This is the most historically common form of buffer overflow exploitation.

CHeap based buffer overflowCorrect

Heap-based buffer overflows corrupt dynamically allocated memory regions, allowing attackers to overwrite heap metadata, function pointers, or adjacent objects. These are generally harder to exploit than stack overflows but are widely used in modern exploitation techniques.

DStatic buffer overflows

'Static buffer overflow' is not a standard category in buffer overflow taxonomy - the accepted classification distinguishes stack-based from heap-based overflows based on where in memory the overflow occurs.

Concept tested: Stack-based and heap-based buffer overflow types

Source: https://owasp.org/www-community/vulnerabilities/Buffer_Overflow

Topics

#buffer overflow#stack-based overflow#heap-based overflow#memory exploitation

Community Discussion

No community discussion yet for this question.

Full GCIH Practice