4 ms·

If something that shouldn't be written is written then yes. But from all the reports it sounds like it just reads something that shouldn't be read and produces

by panzi 12y ago

If something that shouldn't be written is written then yes. But from all the reports it sounds like it just reads something that shouldn't be read and produces a segmentation fault because it reads an unallocated page. I could be wrong about what happens, I haven't looked at it in detail. That is how the news reports sound like to me, so I wonder how could one use that to execute code?

eli 12y ago
To quote the linked article: "The 0x41414141 pointer being read and written by the code comes directly from that proof-of-concept file and can be freely modified by the attacker to try overwriting program control structures."
- panzi 12y ago
  I seem to have overlooked the "and written".