Issue No. 04 - July-August (2004 vol. 2)
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/MSP.2004.36
Jonathan Pincus , Microsoft Research
Brandon Baker , Microsoft
This article describes three powerful general-purpose families of exploits for buffer overruns: arc injection, pointer subterfuge, and heap smashing. These new techniques go beyond the traditional "stack smashing" attack and invalidate traditional assumptions about buffer overruns.
stack smashing, buffer overruns, attacking systems, arc injection, pointer subterfuge, heap smashing
Jonathan Pincus and B. Baker, "Beyond Stack Smashing: Recent Advances in Exploiting Buffer Overruns," in IEEE Security & Privacy, vol. 2, no. , pp. 20-27, 2004.