Buffer overflow bugs, for years the most prevalent type of security vulnerability, will become a thing of the past as crackers realise the potential of different ways to exploiting Windows machines.
Sloppy programming practices (the root cause of buffer overflow vulnerabilities) give rise to security bugs where arbitrary and malicious code can be injected into a system, through a carefully crafted malformed data entry.
Generally, this spurious input is much longer than a program expects, causing code to overflow the buffer and enter parts of a system where it may be subsequently executed. The technique has been successful used against both Unix and NT machines on numerous occasions.
|