Prev Question
Next Question

Which of the following kinds of function are particularly vulnerable to format string attacks?

C functions that perform output formatting

C functions that perform integer computation

C functions that perform real number subtraction

VB functions that perform integer conversion

SQL functions that perform string conversion

SQL functions that perform text conversion

Format string attacks are a new class of vulnerabilities recently discovered. It can be used to crash
a program or to execute harmful code. The problem stems from the use of unfiltered user input as
the format string parameter in certain C functions that perform formatting, such as printf(). A
malicious user may use the %s and %x format tokens, among others, to print data from the stack
or possibly other locations in memory. One may also write arbitrary data to arbitrary locations using
the %n format token.

Prev Question
Next Question

Leave a Reply

Your email address will not be published. Required fields are marked *