Smashing The Stack

• Examples:
  • cert.org (buffer overflow), CVE List
  • us-cert.gov
  • Buffer Overrun in JPEG Processing (GDI+) Could Allow Code Execution (833987)
• Smashing The Stack For Fun And Profit (or locally)
• Notes on Shellcode
• Buffer Overflows, a peek under the hood
• Anatomy of OpenSSL's Heartbleed: Just four bytes trigger horror bug