Format String Vulnerability

[Nytro]

Format String Vulnerability

The above statement is quite common in C programs. In the lecture, we will find out what can go wrong

if the program is running with privileges (e.g. Set-UID program).

Format String

What is a format string?

printf ("The magic number is: %d\n", 1911);

Download:

http://www.cis.syr.edu/~wedu/Teaching/cis643/LectureNotes_New/Format_String.pdf