Which term describes an attack where data exceeds the destination buffer and corrupts adjacent memory, potentially allowing code execution?

Which term describes an attack where data exceeds the destination buffer and corrupts adjacent memory, potentially allowing code execution?

• A. Buffer overflow
• B. Buffer underflow
• C. Integer overflow
• D. Heap overflow

Answer: (A)

The key idea here is writing beyond what a memory buffer can hold. When data exceeds the allocated space, the extra bytes overwrite adjacent memory. This can corrupt variables, control data like return addresses, or function pointers, potentially changing program behavior and enabling code execution if an attacker can place malicious data. The general term for this vulnerability is a buffer overflow, encompassing overflow in any memory region, including the heap. Other options don’t fit as well. A buffer underflow is the opposite problem, where data is read or written before the start of the buffer. Integer overflow relates to arithmetic results exceeding the representable range, not out-of-bounds memory writes. A heap overflow describes the overflow occurring specifically in the heap area, but the broader concept is the overflow of a buffer.

The key idea here is writing beyond what a memory buffer can hold. When data exceeds the allocated space, the extra bytes overwrite adjacent memory. This can corrupt variables, control data like return addresses, or function pointers, potentially changing program behavior and enabling code execution if an attacker can place malicious data. The general term for this vulnerability is a buffer overflow, encompassing overflow in any memory region, including the heap.

Other options don’t fit as well. A buffer underflow is the opposite problem, where data is read or written before the start of the buffer. Integer overflow relates to arithmetic results exceeding the representable range, not out-of-bounds memory writes. A heap overflow describes the overflow occurring specifically in the heap area, but the broader concept is the overflow of a buffer.