ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ31

VerifiedWeb Application Penetration Testing Methodology

MirTech Inc.’s penetration-testing team identified several vulnerabilities in the web application’s code. They prepared a detailed report for the web developers describing the findings. The team advised the developers to avoid dangerous standard-library functions. They also stated that the web application copies data without verifying that it fits in the target destination memory and is vulnerable to being supplied with a large amount of data.

Based on the penetration-testing team’s findings, which type of attack was possible against the web application?

Explanation

A buffer overflow can occur when an application copies attacker-controlled data into a fixed-size memory destination without confirming that the input fits. Oversized input can overwrite adjacent memory, potentially causing crashes or enabling unintended code execution.

Community Discussion

No comments yet. Be the first to start the discussion!