> In this case, there are 4 bugs. One causes N++ to write 1 to 3 bytes past the end of a buffer, the other bugs cause N++ to read some bytes past the end of hea

> In this case, there are 4 bugs. One causes N++ to write 1 to 3 bytes past the end of a buffer, the other bugs cause N++ to read some bytes past the end of heap objects, even the researchers aren't sure how they could be exploited. Honestly, if you go down to the C level of buffers and stack overflows, I think most modern day GUI apps will come up with some bug or other. It's almost like torturing the data to come up with the conclusion you want, EVENTUALLY it is bound to yield you something!