| Arash Baratloo, Navjot Singh, and Timothy Tsai. Libsafe: Protecting critical elements of stacks. White Paper 129 http://www.research.avayalabs.com/project/libsafe/, December 1999. |
....By combining the various conversion specifications and making use of the fact that the format string itself is stored on the stack we can view and write on arbitrary memory addresses. 2. 5 Format String Vulnerabilities While the scanf ( family is involved in numerous of buffer overflow exploits [1] the format string attacks published concern the printf ( family of format string functions [25, 7] For that reason our test only concerns the latter subset of the ANSI C format functions. So we add another eight function calls to our testbed (sprintf ( and vsprintf ( are used differently here ....
Arash Baratloo, Navjot Singh, and Timothy Tsai. Libsafe: Protecting critical elements of stacks. White Paper http://rw. research. avayalabs. cora/proj ect/ libsafe/, December 1999.
No context found.
Arash Baratloo, Navjot Singh, and Timothy Tsai. Libsafe: Protecting critical elements of stacks. White Paper 129 http://www.research.avayalabs.com/project/libsafe/, December 1999.
No context found.
Baratloo, A., Tsai, T., Singh, N.: Libsafe: Protecting critical elements of stacks. Technical report, Avaya Labs Research (1999)
No context found.
Arash Baratloo, Timothy Tsai, and Navjot Singh. Libsafe: Protecting critical elements of stacks. Technical report, Avaya Labs, 1999.
No context found.
Baratloo, A., Tsai, T., Singh, N.: Libsafe: Protecting critical elements of stacks. Technical report, Avaya Labs Research (1999)
Online articles have much greater impact More about CiteSeer.IST Add search form to your site Submit documents Feedback
CiteSeer.IST - Copyright Penn State and NEC