Search references for BUFFER OVERFLOW-PROTECTION. Phrases containing BUFFER OVERFLOW-PROTECTION
See searches and references containing BUFFER OVERFLOW-PROTECTION!BUFFER OVERFLOW-PROTECTION
Software security techniques
Buffer overflow protection is any of various techniques used during software development to enhance the security of executable programs by detecting buffer
Buffer_overflow_protection
Anomaly in computer security and programming
information security, a buffer overflow or buffer overrun is an anomaly whereby a program writes data to a buffer beyond the buffer's allocated memory, overwriting
Buffer_overflow
Software anomaly
In software, a stack buffer overflow or stack buffer overrun occurs when a program writes to a memory address on the program's call stack outside of the
Stack_buffer_overflow
Computer feature
Descriptors provide essential memory protection, security, safety, catching all attempts at out-of-bounds access and buffer overflow. Descriptors are a form of
Burroughs large systems descriptors
Burroughs_large_systems_descriptors
Concept in computer security
executable-space protection to mark writable memory areas, such as the stack and heap, as non-executable, helping to prevent buffer overflow exploits. These
Executable-space_protection
How software progresses through its implementation
control-flow integrity techniques, including stack canaries, buffer overflow protection, shadow stacks, and vtable pointer verification, are used to defend
Control_flow
Software anomaly
A heap overflow, heap overrun, or heap smashing is a type of buffer overflow that occurs in the heap data area. Heap overflows are exploitable in a different
Heap_overflow
Concept in assembly language programming
Function prologue and epilogue also sometimes contain code for buffer overflow protection. A function prologue typically does the following actions if the
Function prologue and epilogue
Function_prologue_and_epilogue
Computer arithmetic error
unexpectedly small, potentially leading to a buffer overflow which, depending on the use of the buffer, might in turn cause arbitrary code execution
Integer_overflow
Portion of an object file containing executable instructions
Tan; Ji-yan Zheng; Yuan-Da Cao; Xue-lan Zhang (October 2005). Buffer overflow protection based on adjusting code segment limit. IEEE International Symposium
Code_segment
Topics referred to by the same term
run Windows Mobile, released in November 2002 Canary value, a buffer overflow protection method in computer programming Canary, LLC, an oilfield services
Canary
Free general-purpose operating system
of its software by default using gcc features such as PIE and buffer overflow protection, unlike operating systems such as OpenBSD, but tries to build
Debian
Process of increasing the security of a system
perform exploits. Common hardening techniques are: Buffer overflow protection Stack overwriting protection Position independent executables and address space
Hardening_(computing)
Software development methodology
engineering. Buffer overflows, a common software security vulnerability, happen when a process tries to store data beyond a fixed-length buffer. For example
Secure_coding
Linux distribution developed by Canonical
Ubuntu compiles its packages using GCC features such as PIE and buffer overflow protection to harden its software.[relevant? – discuss] These extra features
Ubuntu
Term in computer security
compares the value in r10 to the target function's stored hash. Buffer overflow protection Payer, Mathias. "Control-Flow Integrity: An Introduction". nebelwelt
Control-flow_integrity
American computer programmer
Yong-Joon and Gyungho Lee, "Repairing return address stack for buffer overflow protection," Proceedings of the 1st conference on Computing frontiers, ACM
Christien_Rioux
Computer fault caused by access to restricted memory
points to memory that has been freed/deallocated/deleted) A buffer overflow A stack overflow Attempting to execute a program that does not compile correctly
Segmentation_fault
Computer security attack
"return-to-libc" attack is a computer security attack usually starting with a buffer overflow in which a subroutine return address on a call stack is replaced by
Return-to-libc_attack
of a computer program's memory that helps software developers find buffer overflows while developing the program. When a program is compiled for debugging
Guard_byte
Operating system
kernel-based intrusion detection, strong random number generation, stack buffer overflow protection, security partitioning, role-based access management, and various
HP-UX
file. Buffer overflow protection - with the introduction of garbage collection into C++, Managed C++ is less prone to the common buffer overflow errors
Managed_Extensions_for_C++
Concept in computer security
protecting a procedure's stored return address, such as from a stack buffer overflow or call stack spoofing. The shadow stack itself is a second, separate
Shadow_stack
State when an empty buffer is read from
term as defined above is distinct from buffer overflow, a condition where a portion of memory forms a buffer of a fixed size yet is filled with more
Buffer_underrun
Tool to detect memory-related bugs
delete [] array; return res; } ==25372==ERROR: AddressSanitizer: heap-buffer-overflow on address 0x61400000ffd4 at pc 0x0000004ddb59 bp 0x7fffea6005a0 sp
Code_sanitizer
Software bug
Wouter Joosen; Frank Piessens (2013-02-25). "Efficient protection against heap-based buffer overflows without resorting to magic" (PDF). Dept. of Computer
Out-of-bounds_read
High-level programming language
Corporation, Buffer overflow in crypto.signText() Archived 2014-06-04 at the Wayback Machine Festa, Paul (19 August 1998). "Buffer-overflow bug in IE".
JavaScript
Type of software bug
(unless suitable memory protection software is being used). Using memory beyond the memory that was allocated (buffer overflow): If an array is used in
Memory_corruption
Arbitrary code execution exploit
an attacker controlling the call stack, for example through a stack buffer overflow, is able to influence the control flow of the program through simple
Sigreturn-oriented programming
Sigreturn-oriented_programming
Computer security exploit technique
exploitation of buffer overflow bugs by marking the memory where data is written as non-executable, a technique known as executable-space protection. With this
Return-oriented_programming
State of being protected from memory access bugs
security vulnerabilities when dealing with memory access, such as buffer overflows and dangling pointers. For example, Java is memory-safe because its
Memory_safety
Russian computer security specialist (born 1977)
attack and the first generic heap-based buffer overflow exploitation technique, as well as computer security protection techniques such as privilege separation
Solar_Designer
Computer security researcher
for exploiting heap buffer overflows in browsers. In 2008, he presented research at Black Hat showing how to bypass memory protection safeguards in Windows
Alexander_Sotirov
Dynamic memory management in the C programming language
usually needs to be a part of the malloc library. Buffer overflow Memory debugger Memory protection Page size Variable-length array 7.20.3 Memory management
C_dynamic_memory_allocation
2003 Windows computer worm
allowed for execution of the attack. The worm spreads by exploiting a buffer overflow discovered by the Polish security research group Last Stage of Delirium
Blaster_(computer_worm)
Technology used in CPUs
into another program’s data storage area and execute it, such as in a buffer overflow attack. The term "NX bit" was introduced by Advanced Micro Devices
NX_bit
Set of extensions to the x86 instruction set architecture
compile-time intentions are maliciously exploited at runtime due to buffer overflows. In practice, there have been too many flaws discovered in the design
Intel_MPX
Security features as used in OpenBSD operating system
stack protection in the form of StackGhost. This makes use of features of the SPARC architecture to help prevent exploitation of buffer overflows. Support
OpenBSD_security_features
Unexpected program exit due to an error
memory addresses, incorrect address values in the program counter, buffer overflow, overwriting a portion of the affected program code due to an earlier
Crash_(computing)
Malicious archive file designed to disrupt the program or system reading it
are performed on archives to help prevent attacks that would cause a buffer overflow, an out-of-memory condition, or exceed an acceptable amount of program
Zip_bomb
System-on-a-chip series designed by Apple Inc.
Tagging Extension (EMTE) in synchronous mode. The system defends against buffer overflow and use-after-free vulnerabilities and protects against side-channel
Apple_M5
Code intended as a payload to exploit a software vulnerability
exploiting a vulnerability can be achieved by causing an error such as buffer overflow. If successful, the shellcode enables access to the machine via the
Shellcode
Software for debugging a computer program
occur. Some debuggers also incorporate memory protection to avoid storage violations such as buffer overflow. This may be extremely important in transaction
Debugger
Security and privacy features of the iOS operating system
to be marked as non-executable, working alongside ASLR to prevent buffer overflow attacks including return-to-libc attacks. As mentioned above, one use
Security_and_privacy_of_iOS
Computer memory management methodology
security so that operations cannot overflow or underflow the referenced block (commonly known as buffer overflow). Descriptors themselves are protected
Memory_management
Method of attack on computer systems
Some common methods include: Buffer overflow – Attackers send more data to a buffer than it can handle, causing it to overflow and overwrite adjacent memory
Exploit_(computer_security)
Computer exploit using just-in-time compilation
redirect code execution into the newly generated code. For example, a buffer overflow or use after free bug could allow the attack to modify a function pointer
JIT_spraying
German computer security software company
were supplied until June 2016. In 2005, Avira was hit by ACE archive buffer overflow vulnerability. A remote attacker could have exploited this vulnerability
Avira
Computer operating system component
by exploiting a buffer overflow in the LSASS on Windows XP and Windows 2000 operating systems. "Configuring Additional LSA Protection". Microsoft. Retrieved
Local Security Authority Subsystem Service
Local_Security_Authority_Subsystem_Service
Discontinued web browser based on Mozilla Firefox
3.3.2, Swiftfox 2.0 uses 4.0.4). Increased security Better protection from buffer overflow attacks (Swiftfox 2.0 uses -D_FORTIFY_SOURCE=2; Firefox 2.0
Swiftfox
Pointer that does not point to a valid object
this feature may be considered bad * style if not commented */ } Like buffer-overflow bugs, dangling/wild pointer bugs frequently become security holes.
Dangling_pointer
1990 U.S. federal law allocating funds to wetland preservation
projects contribute: Protection or reclamation of wetland acreage Protection or creation of estuarine and marine habitats Natural buffers that mitigate wind
Coastal Wetlands Planning, Protection and Restoration Act
Coastal_Wetlands_Planning,_Protection_and_Restoration_Act
Unpredictable result when running a program
integer division by zero, signed integer overflow, indexing an array outside of its defined bounds (see buffer overflow), or null pointer dereferencing. In
Undefined_behavior
Excessive access to computer resources
run under the Local System user account. A vulnerability such as a buffer overflow may be used to execute arbitrary code with privilege elevated to Local
Privilege_escalation
Overview article
Defender); exploit protection features such as Address Space Layout Randomization, Data Execution Prevention improvements, and stack overflow detection for
Security and safety features new to Windows Vista
Security_and_safety_features_new_to_Windows_Vista
Unix-like operating system
which eliminates certain buffer overflows and buffer management problems. Also, many exploits work by overrunning a buffer to trick the program into
Minix_3
River in Tennessee, United States
contamination, principally E. coli (fecal bacteria) arising from sewer overflows, aging sanitary infrastructure, and inputs from stormwater runoff Sediment—suspended
Richland Creek (Nashville, Tennessee)
Richland_Creek_(Nashville,_Tennessee)
fixed; swprintf_s(buffer, __countof(buffer), TEXT("Parent = %d, Flags = %d"), fixedObject->ParentID, fooObject->Flags[0]); MessageBox(buffer); } if (error
ObjectDatabase++
Guidance and navigation computer used in Apollo spacecraft
different (overflow state) before and/or after the AD. The fact that overflow is a state rather than an event forgives limited extents of overflow when adding
Apollo_Guidance_Computer
Tank used in hot water systems
Equipment Directive (PED) 97/23/EC. An expansion tank, also known as "overflow bottle", is also used in the cooling system of most internal combustion
Expansion_tank
Model independent architecture for the S/360 line of mainframe computers
specifies invalid operands, e.g., invalid data, invalid overlap. A fixed-point overflow exception is recognized when significant bits are lost in a fixed point
IBM_System/360_architecture
Hardware or software fault
by the task. A common type of storage violation is known as a stack buffer overflow where a program attempts to exceed the limits set for its call stack
Storage_violation
Data structure used in computer programs
exploitable through stack buffer overflows, which are the most common type of buffer overflow. One such attack involves filling one buffer with arbitrary executable
Call_stack
Computer systems programming special block code
When allocated stack space is exceeded (a condition known as a stack overflow), this is not normally detected in hardware by chips of this class. If
Interrupt_handler
Security-related instruction code processor extension
attack, disclosed in August 2018, combines speculative execution and buffer overflow to bypass the SGX. A security advisory and mitigation for this attack
Software_Guard_Extensions
signatures. To detect buffer overflow attacks, an IDS might look for the evidence of NOP slides which are used to weaken the protection of address space layout
Intrusion detection system evasion techniques
Intrusion_detection_system_evasion_techniques
Computer security exploit
comparison, "conventional" attack vectors such as buffer overflows aim at circumventing the protection mechanisms at the software level, by exploiting various
Row_hammer
Technique circumventing programming language data typing
import java.nio.ByteBuffer; void main(String[] args) { int value = 42; ByteBuffer buffer = ByteBuffer.allocate(Integer.BYTES); buffer.putInt(value); //
Type_punning
Computer memory architecture
limit waiting by higher levels, a lower level will respond by filling a buffer and then signaling for activating the transfer. There are four major storage
Memory_hierarchy
Control of access to computer networks
Type of attack on a computer network Buffer overflow – Anomaly in computer security and programming Heap overflow – Software anomaly Format string attack –
Network_security
Chatbot developed by Google
into its Messages app on Android, and announced a partnership with Stack Overflow. Gemini again took center stage at the 2024 Google I/O keynote. Google
Google_Gemini
Governor of Massachusetts since 2023
op-ed in the Worcester Telegram and Gazette on upholding the Massachusetts buffer zone law, which she worked on at the Attorney General's Office. She also
Maura_Healey
2025 Android mobile operating system
configuration changes such as screen orientation and theme changes, can hide the overflow menu and preview features, and includes a selection bar and a snack bar
Android_16
River in Maryland, United States
runoff pollution, including "downspout disconnection, storm drain marking, buffer improvement, alley retrofit, street sweeping, tree planting and public education
Back_River_(Maryland)
Computer security technique
defeat ASLR in a web browser using JavaScript. Buffer overflow Stack buffer overflow Stack-smashing protection NX bit Marco-Gisbert, Hector; Ripoll Ripoll
Address space layout randomization
Address_space_layout_randomization
Security issue for web applications
Twitter and Facebook. Cross-site scripting flaws have since surpassed buffer overflows to become the most common publicly reported security vulnerability
Cross-site_scripting
Lake in North Bačka District, Serbia
of the canal, 50 cm (20 in) deep and 15 m (49 ft) long, to conduct the overflow of waste into the lake, instead into the septic tanks. According to the
Lake_Palić
Methods for reducing detrimental effects of flood waters
stormwater systems. This separates stormwater from blackwater, so that overflows in peak periods do not contaminate rivers. One example is the SMART Tunnel
Flood_management
Software testing tool
debugging purposes, e.g. with memory protection (which protects against accidental or deliberate buffer overflow). To improve the speed performance—compared
Instruction_set_simulator
Kernel that provides fewer services than a traditional kernel
Asynchronous IPC requires that the kernel maintains buffers and queues for messages, and deals with buffer overflows; it also requires double copying of messages
Microkernel
Malware that affects the Linux operating system
sensitive to buffer overflow attacks: if the program did not care about the size of the buffer itself, the kernel provided only limited protection, allowing
Linux_malware
Processor security vulnerability
to compromise CPU protection mechanisms using code to exploit the CPU pattern history table, branch target buffer, return stack buffer, and branch history
Spectre (security vulnerability)
Spectre_(security_vulnerability)
Chinese censorship software
al. indicated the existence of buffer overflow vulnerabilities which they ascribed to programming errors. Buffer overflow may occur when the software performs
Green_Dam_Youth_Escort
calls that breached its rules, thus providing protection. It offered protection against buffer overflow attacks and could successfully detect rootkits
Prevx
Free and open-source operating system
additional protection against buffer overflow based attacks. As of 23 July 2005[update], the kernel is no longer built with this protection by default
DragonFly_BSD
Set of all computer components critical to its security
application; in other words, breaching into the Web server through e.g. a buffer overflow may not be regarded as a compromise of the operating system proper
Trusted_computing_base
Software that manages computer hardware resources
Despite attempts to protect against them, vulnerabilities are caused by buffer overflow attacks, which are enabled by the lack of bounds checking. Hardware
Operating_system
Computer Debug Software Package
without any memory protection of its own.[citation needed] A single "rogue" application program (frequently by a buffer overflow) could accidentally
CA/EZTEST
1999 Microsoft operating system version
malicious programs exploiting the IIS services – specifically a notorious buffer overflow tendency. This tendency is not operating-system-version specific, but
Windows_2000
Method of using software to modify the intended behavior of hardware
Exploit — allows the PlayStation 2 to run homebrew by exploiting a buffer overflow in the BIOS code responsible for loading original PlayStation games
Softmod
Control system architecture for supervision of machines and processes
Security researcher Jerry Brown submitted a similar advisory regarding a buffer overflow vulnerability in a Wonderware InBatchClient ActiveX control. Both vendors
SCADA
Practices to secure access to a data center
it is communicating with the trusted host. Buffer overflow attacks: When a program allocates memory buffer space beyond what it had reserved, it results
Data_center_security
Numeric value with an unclear meaning
a debugger or memory dump most likely indicates an error such as a buffer overflow or an uninitialized variable. Famous and common examples include: Most
Magic_number_(programming)
Type of software vulnerability
IEEE Security & Privacy, IEEE Computer Society Klein, Tobias (2004). Buffer Overflows und Format-String-Schwachstellen - Funktionsweisen, Exploits und Gegenmaßnahmen
Uncontrolled_format_string
Critical reception of the Microsoft operating system
memory-protection safeguards in Windows Vista, such as address space layout randomization (ASLR). The result of this is that any already existing buffer overflow
Criticism_of_Windows_Vista
Integrated approach to urban water cycle
vigorous vegetation cover. Swales and buffer strips are used to convey stormwater in lieu of pipes and provide a buffer strip between receiving waters (e
Water-sensitive_urban_design
Computer architecture for security
complexity. As systems became faster and more complex, vulnerabilities like buffer overflows and use-after-free errors became widespread. CHERI addresses these
Capability Hardware Enhanced RISC Instructions
Capability_Hardware_Enhanced_RISC_Instructions
Source code that alters its instructions to the hardware while executing
where code accidentally modifies itself due to an error such as a buffer overflow. Self-modifying code can involve overwriting existing instructions
Self-modifying_code
Czech science fiction writer and journalist
by the aliens. The modified signal triggers a process similar to a buffer overflow in a human brain, rewriting the victim's DNA and turning it into a
Ondřej_Neff
Set of computer programs providing encrypted communication sessions
vulnerability are CVE-2016-0777 (information leak) and CVE-2016-0778 (buffer overflow). On March 29, 2024, a serious supply chain attack on XZ Utils was
OpenSSH
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION
Surname or Lastname
English
English : topographic name for someone who lived by a stream, from Middle English burn ‘stream’ + the suffix -er denoting an inhabitant.
Surname or Lastname
English
English : variant spelling of Butcher.German : topographic name for someone who lived by a beech tree or beech wood, from Middle High German buoche ‘beech tree’ + the suffix -er denoting an inhabitant.German : habitational name for someone from any of numerous places called Buch.French (Bûcher) : occupational name for a logger or woodsman, from a derivative of buche ‘log’.One of the earliest immigrants of the Bucher family came from Würzenhaus, Switzerland, to Philadelphia in 1735.
Surname or Lastname
English (of Norman origin)
English (of Norman origin) : nickname for a greedy person, from Old French saffre ‘glutton’.South German : topographic name for someone living in a damp depression.Jewish (Ashkenazic) : variant of Safir.
Female
English
Pet form of English Elizabeth, BUFFY means "God is my oath."
Surname or Lastname
English
English : occupational name for a maker or seller of buttons, Old French boutonier, from bo(u)ton ‘knob’, ‘lump’, specialized to mean ‘button’.Altered spelling of German Büttner (see Buettner).
Surname or Lastname
English
English : variant of Duffield.
Surname or Lastname
English
English : variant of Burger.
Surname or Lastname
German
German : variant of Rufer.German : variant of Roffers.English : variant of Rover 1.
Surname or Lastname
English
English : possibly of Flemish origin, from a pet form of the Germanic personal name Bufo.English : alternatively, perhaps, from a diminutive of Old French bufe, buffe ‘blow’, ‘slap in the face’, hence probably a nickname for a rough or uncouth man.
Boy/Male
Muslim/Islamic
(from the verb fada to overflow)
Boy/Male
African, Arabic, Indian, Muslim, Sindhi, Swahili
Beneficial; Useful; Overflow
Surname or Lastname
English
English : nickname for someone with some fancied resemblance to a bittern, perhaps in the booming quality of the voice, from Middle English, Old French butor ‘bittern’ (a word of obscure etymology).English and German : metonymic occupational name for a dairyman or seller of butter, from Old English butere ‘butter’, Middle High German buter.German : possibly a short form of any of the various compound names formed with Butter ‘butter’ (see 2).
Surname or Lastname
variant of German Pfeffer.English
variant of German Pfeffer.English : metonymic occupational name or nickname from Anglo-Norman French pivre ‘pepper’ (see Pepper).
Surname or Lastname
English
English : habitational name from either of two places called Bulmer, in North Yorkshire and Essex, or from Boulmer in Northumberland. The first, recorded in Domesday Book as Bolemere, is named in Old English with bula ‘bull’ + mere ‘lake’, as is Boulmer; the second, found in early records as Bulenemera, is from bulena (genitive plural of bula) + mere ‘lake’.
Surname or Lastname
English
English : nickname, of Norman origin, for a reliable or good-hearted person, from Old French bon ‘good’ + cuer ‘heart’ (Latin cor).German : variant of Boenker.Bunker Hill in Charlestown, MA, was named as land assigned in 1634 to George Bunker of Charlestown, who had emigrated from Odell in Bedfordshire, England.
Surname or Lastname
English
English : possibly an unflattering nickname for a boastful, swaggering person (one who huffs and puffs).German (Hüffer) : from the Germanic personal name Hugifrid, composed of hug ‘head’, ‘mind’, ‘spirit’ + frid ‘peace’.North German (Hüffer) : status name for a prosperous small farmer. Compare South German Huber.German : probably an American spelling of Hof or Hoff.
Surname or Lastname
English
English : from Old French cof(f)re ‘chest’, ‘box’, applied as a metonymic occupational name for a maker of coffers or chests or, by extension, for a treasurer.Probably an Americanized spelling of German Kaufer or Kauffer (see Kaufer).
Surname or Lastname
English and Irish
English and Irish : from a word that originally denoted a wine steward, usually the chief servant of a medieval household, from Norman French butuiller (Old French bouteillier, Latin buticularius, from buticula ‘bottle’). In the large households of royalty and the most powerful nobility, the title came to denote an officer of high rank and responsibility, only nominally concerned with the supply of wine, if at all.Anglicized form of French Boutilier.Jewish (from Poland and Ukraine) : occupational name for a bottle maker, from Yiddish butl ‘bottle’ + the agent suffix -er.This name was brought independently to New England by many bearers from the 17th century onward. William Butler was one of the founders of Hartford, CT, (coming from Cambridge, MA, with Thomas Hooker) in 1635.
Male
English
English slang term for someone who breaks things transferred to forename use, originally derived from the verb bust, BUSTER means "to break, smash," hence "breaker, destroyer, smasher."
Surname or Lastname
Altered spelling of French Duffet, variant of Dufay (see Duffee).English
Altered spelling of French Duffet, variant of Dufay (see Duffee).English : nickname from Middle English d(o)uve, dofe ‘dove’ + hed ‘head’ or fote ‘foot’.
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION
BUFFER OVERFLOW-PROTECTION