Exam 10: Buffer Overflow

In 2003 the _________ exploited a buffer overflow in Microsoft SQL Server 2000.

A _________ value is named after the miner's bird used to detect poisonous air in a mine and warn miners in time for them to escape.

The buffer is located __________ .

A buffer overflow in Microoft Windows 2000/XP Local Security Authority Subsystem Service was exploited by the _________ .

__________ defenses aim to detect and abort attacks in existing programs.

_________ is a tool used to automatically identify potentially vulnerable programs.

_________ attacks can occur in a binary buffer copy when the programmer has included code to check the number of bytes being transferred,but due to a coding error,allows just one more byte to be copied than there is space available.

Buffer overflows can be found in a wide variety of programs, processing a range of different input,and with a variety of possible responses.

Shellcode must be able to run no matter where in memory it is located.

Gaps,or __________ ,are flagged in the MMU as illegal addresses,and any attempt to access them results in the process being aborted.

A __________ can occur as a result of a programming error when a process attempts to store data beyond the limits of a fixed-size buffer and consequently overwrites adjacent memory locations.

At the basic machine level,all of the data manipulated by machine instructions executed by the computer processor are stored in either the processor's registers or in memory.

An essential component of many buffer overflow attacks is the transfer of execution to code supplied by the attacker and often saved in the buffer being overflowed.This code is known as _________ .

A ___________ overflow occurs when the targeted buffer is located on the stack,usually as a local variable in a function's stack frame.

An attacker can generally determine in advance exactly where the targeted buffer will be located in the stack frame of the function in which it is defined.

Shellcode has to be __________,which means it cannot contain any absolute address referring to itself.

A stack overflow can result in some form of a denial-of-service attack on a system.

There are several generic restrictions on the content of shellcode.

__________ aim to prevent or detect buffer overflows by instrumenting programs when they are compiled.

Even though it is a high-level programming language,Java still suffers from buffer overflows because it permits more data to be saved into a buffer than it has space for.