GCIH · Question #5
Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the…
The correct answer is B. Stack based buffer overflow C. Heap based buffer overflow. Buffer overflows are classified by the memory region they target - stack-based exploits the call stack and heap-based exploits dynamically allocated memory. These are the two primary, well-recognized categories in security research and exploit development.
Question
Buffer overflows are one of the major errors used for exploitation on the Internet today. A buffer overflow occurs when a particular operation/function writes more data into a variable than the variable was designed to hold. Which of the following are the two popular types of buffer overflows? Each correct answer represents a complete solution. Choose two.
Options
- ADynamic buffer overflows
- BStack based buffer overflow
- CHeap based buffer overflow
- DStatic buffer overflows
How the community answered
(20 responses)- A5% (1)
- B95% (19)
Why each option
Buffer overflows are classified by the memory region they target - stack-based exploits the call stack and heap-based exploits dynamically allocated memory. These are the two primary, well-recognized categories in security research and exploit development.
'Dynamic buffer overflow' is not a recognized technical classification - buffer overflows are categorized by memory region (stack or heap), not by dynamic versus static allocation.
Stack-based buffer overflows occur when a program writes beyond the bounds of a stack-allocated buffer, potentially overwriting the saved return address and allowing an attacker to redirect code execution to arbitrary shellcode. This is the most historically common form of buffer overflow exploitation.
Heap-based buffer overflows corrupt dynamically allocated memory regions, allowing attackers to overwrite heap metadata, function pointers, or adjacent objects. These are generally harder to exploit than stack overflows but are widely used in modern exploitation techniques.
'Static buffer overflow' is not a standard category in buffer overflow taxonomy - the accepted classification distinguishes stack-based from heap-based overflows based on where in memory the overflow occurs.
Concept tested: Stack-based and heap-based buffer overflow types
Source: https://owasp.org/www-community/vulnerabilities/Buffer_Overflow
Topics
Community Discussion
No community discussion yet for this question.