Multiple choice technology security

Format string vulnerabilities in programs can be found by

  1. Forcing buffer overflows

  2. Submitting random long strings to the application

  3. Causing underflow problems

  4. Including string specifiers in input data
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

Format string vulnerabilities occur when user input is passed directly as the format string argument to functions like printf. By including format specifiers like %x, %s, or %n in the input data, attackers can read memory contents or write to arbitrary memory addresses. Testing for these vulnerabilities involves submitting inputs containing format specifiers to see if the application interprets them as format commands rather than literal text.

Keep practicing — related questions