Buffer overflow (English Wikipedia)

Klein, Christian (September 2004). "Buffer Overflow" (PDF). Archived from the original (PDF) on 2007-09-28. {{cite journal}}: Cite journal requires |journal= (help)

and.org (Global: low place; English: low place)

"The Vstr Homepage". Archived from the original on 2017-03-05. Retrieved 2007-05-15.

archive.today (Global: 14^th place; English: 14^th place)

"CERT Secure Coding Initiative". Archived from the original on December 28, 2012. Retrieved 2007-07-30.
"KernelTrap.Org". Archived from the original on 2012-05-29. Retrieved 2007-06-03.

area.com (Global: low place; English: low place)

wiretap.area.com

"Archived copy". wiretap.area.com. Archived from the original on 5 May 2001. Retrieved 6 June 2022.{{cite web}}: CS1 maint: archived copy as title (link)

blackhat.com (Global: low place; English: low place)

Ukai, Yuji; Soeder, Derek; Permeh, Ryan (2004). "Environment Dependencies in Windows Exploitation". BlackHat Japan. Japan: eEye Digital Security. Retrieved 2012-03-04.

box.sk (Global: low place; English: low place)

neworder.box.sk

Vangelis (2004-12-08). "Stack-based Overflow Exploit: Introduction to Classical and Advanced Overflow Technique". Wowhacker via Neworder. Archived from the original (text) on August 18, 2007. {{cite journal}}: Cite journal requires |journal= (help)

cert.org (Global: low place; English: low place)

securecoding.cert.org

"CERT Secure Coding Initiative". Archived from the original on December 28, 2012. Retrieved 2007-07-30.

cplusplus.com (Global: low place; English: low place)

"vector::at - C++ Reference". Cplusplus.com. Retrieved 2014-03-27.

doi.org (Global: 2^nd place; English: 2^nd place)

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.
Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

eeye.com (Global: low place; English: low place)

research.eeye.com

"eEye Digital Security". Archived from the original on 2009-06-20. Retrieved 2007-06-03.

europa.eu (Global: 68^th place; English: 117^th place)

euvd.enisa.europa.eu

"EUVD-2013-1371". European Union Vulnerability Database. 2025-10-22. Retrieved 2025-12-09.

forth.gr (Global: low place; English: low place)

dcs.ics.forth.gr

Akritidis, P.; Evangelos P. Markatos; M. Polychronakis; Kostas D. Anagnostakis (2005). "STRIDE: Polymorphic Sled Detection through Instruction Sequence Analysis." (PDF). Proceedings of the 20th IFIP International Information Security Conference (IFIP/SEC 2005). IFIP International Information Security Conference. Archived from the original (PDF) on 2012-09-01. Retrieved 2012-03-04.

fsf.org (Global: 8,472^nd place; English: 7,926^th place)

directory.fsf.org

"Libsafe at FSF.org". Retrieved 2007-05-20.

gamesindustry.biz (Global: 1,124^th place; English: 697^th place)

"Hacker breaks Xbox protection without mod-chip". Archived from the original on 2007-09-27. Retrieved 2007-06-03.

ghostarchive.org (Global: 32^nd place; English: 21^st place)

"Modern Overflow Targets" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2013-07-05.
"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks by Cowan et al" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2007-05-20.
"USENIX - The Advanced Computing Systems Association" (PDF). www.usenix.org. Archived (PDF) from the original on 2022-10-09. Retrieved 3 April 2018.

grsecurity.net (Global: low place; English: low place)

pax.grsecurity.net

"PaX: Homepage of the PaX team". Retrieved 2007-06-03.
"PaX at GRSecurity.net". Retrieved 2007-06-03.

hitb.org (Global: low place; English: low place)

conference.hitb.org

Shah, Saumil (2006). "Writing Metasploit Plugins: from vulnerability to exploit" (PDF). Hack In The Box. Kuala Lumpur. Retrieved 2012-03-04.

ietf.org (Global: 214^th place; English: 176^th place)

datatracker.ietf.org

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.

intel.com (Global: 1,118^th place; English: 825^th place)

developer.intel.com

Intel 64 and IA-32 Architectures Software Developer's Manual Volume 2A: Instruction Set Reference, A-M (PDF). Intel Corporation. May 2007. pp. 3–508. Archived from the original (PDF) on 2007-11-29.

iso.org (Global: 629^th place; English: 610^th place)

International Organization for Standardization (2007). "Information technology – Programming languages, their environments and system software interfaces – Extensions to the C library – Part 1: Bounds-checking interfaces". ISO Online Browsing Platform.

kde.org (Global: 8,253^rd place; English: 6,484^th place)

"Krita: Heap-based buffer overflow when parsing TGA files". KDE Project. Retrieved 2025-12-08.{{cite web}}: CS1 maint: url-status (link)

kerneltrap.org (Global: low place; English: low place)

"KernelTrap.Org". Archived from the original on 2012-05-29. Retrieved 2007-06-03.

metasploit.com (Global: low place; English: low place)

"The Metasploit Opcode Database". Archived from the original on 12 May 2007. Retrieved 2007-05-15.

microsoft.com (Global: 153^rd place; English: 151^st place)

microsoft.com

"Microsoft Technet Security Bulletin MS04-028". Microsoft. Archived from the original on 2011-08-04. Retrieved 2007-05-15.
"Microsoft Technet Security Bulletin MS02-039". Microsoft. Archived from the original on 2008-03-07. Retrieved 2007-06-03.

technet2.microsoft.com

"Microsoft Technet: Data Execution Prevention". Archived from the original on 2006-06-22. Retrieved 2006-06-30.

msdn.com (Global: 3,029^th place; English: 2,272^nd place)

blogs.msdn.com

"Protecting against Pointer Subterfuge (Kinda!)". msdn.com. Archived from the original on 2010-05-02. Retrieved 3 April 2018.
"Protecting against Pointer Subterfuge (Redux)". msdn.com. Archived from the original on 2009-12-19. Retrieved 3 April 2018.

net-security.org (Global: low place; English: low place)

"Creating Arbitrary Shellcode In Unicode Expanded Strings" (PDF). Archived from the original (PDF) on 2006-01-05. Retrieved 2007-05-15.

ngsec.com (Global: low place; English: low place)

"NGSec Stack Defender". Archived from the original on 2007-05-13. Retrieved 2007-06-03.

nist.gov (Global: 355^th place; English: 454^th place)

csrc.nist.gov

"Computer Security Technology Planning Study" (PDF). p. 61. Archived from the original (PDF) on 2011-07-21. Retrieved 2007-11-02.

owasp.org (Global: low place; English: low place)

https://www.owasp.org/index.php/Buffer_OverflowsBuffer Overflows article on OWASP Archived 2016-08-29 at the Wayback Machine

packetstormsecurity.com (Global: low place; English: low place)

"Modern Overflow Targets" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2013-07-05.

packetstormsecurity.org (Global: low place; English: low place)

Alvarez, Sergio (2004-09-05). "Win32 Stack BufferOverFlow Real Life Vuln-Dev Process" (PDF). IT Security Consulting. Retrieved 2012-03-04. {{cite journal}}: Cite journal requires |journal= (help)

phrack.org (Global: low place; English: low place)

""Smashing the Stack for Fun and Profit" by Aleph One". Retrieved 2025-03-06.

raykoid666.wordpress.com (Global: low place; English: low place)

"The Exploitant - Security info and tutorials". Retrieved 2009-11-29.

rfc-editor.org (Global: 6,184^th place; English: 4,465^th place)

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.

security-express.com (Global: low place; English: low place)

"Bugtraq security mailing list archive". Archived from the original on 2007-09-01. Retrieved 2007-06-03.

securityfocus.com (Global: low place; English: low place)

"CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow". Retrieved 2007-05-15.

sf.net (Global: low place; English: low place)

bstring.sf.net

"The Better String Library".

softpedia.com (Global: 3,250^th place; English: 2,302^nd place)

linux.softpedia.com

"Openwall Linux kernel patch 2.4.34-ow1". Archived from the original on 2012-02-19. Retrieved 2007-06-03.

std.com (Global: low place; English: low place)

world.std.com

""A Tour of The Worm" by Donn Seeley, University of Utah". Archived from the original on 2007-05-20. Retrieved 2007-06-03.

sys-manage.com (Global: low place; English: low place)

"BufferShield: Prevention of Buffer Overflow Exploitation for Windows". Retrieved 2007-06-03.

theiling.de (Global: low place; English: low place)

"The Erwin Homepage". Retrieved 2007-05-15.

uninformed.org (Global: low place; English: low place)

"Bypassing Windows Hardware-enforced Data Execution Prevention". Archived from the original on 2007-04-30. Retrieved 2007-05-20.

usenix.org (Global: 5,990^th place; English: 3,752^nd place)

"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks by Cowan et al" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2007-05-20.
"12th USENIX Security Symposium – Technical Paper". www.usenix.org. Retrieved 3 April 2018.
"USENIX - The Advanced Computing Systems Association" (PDF). www.usenix.org. Archived (PDF) from the original on 2022-10-09. Retrieved 3 April 2018.
Larochelle, David; Evans, David (13 August 2001). "Statically Detecting Likely Buffer Overflow Vulnerabilities". USENIX Security Symposium. 32.

web.archive.org (Global: 1^st place; English: 1^st place)

"The Metasploit Opcode Database". Archived from the original on 12 May 2007. Retrieved 2007-05-15.
"Microsoft Technet Security Bulletin MS04-028". Microsoft. Archived from the original on 2011-08-04. Retrieved 2007-05-15.
"Creating Arbitrary Shellcode In Unicode Expanded Strings" (PDF). Archived from the original (PDF) on 2006-01-05. Retrieved 2007-05-15.
Vangelis (2004-12-08). "Stack-based Overflow Exploit: Introduction to Classical and Advanced Overflow Technique". Wowhacker via Neworder. Archived from the original (text) on August 18, 2007. {{cite journal}}: Cite journal requires |journal= (help)
Balaban, Murat. "Buffer Overflows Demystified". Enderunix.org. Archived from the original on August 12, 2004. {{cite journal}}: Cite journal requires |journal= (help)
Akritidis, P.; Evangelos P. Markatos; M. Polychronakis; Kostas D. Anagnostakis (2005). "STRIDE: Polymorphic Sled Detection through Instruction Sequence Analysis." (PDF). Proceedings of the 20th IFIP International Information Security Conference (IFIP/SEC 2005). IFIP International Information Security Conference. Archived from the original (PDF) on 2012-09-01. Retrieved 2012-03-04.
Klein, Christian (September 2004). "Buffer Overflow" (PDF). Archived from the original (PDF) on 2007-09-28. {{cite journal}}: Cite journal requires |journal= (help)
Intel 64 and IA-32 Architectures Software Developer's Manual Volume 2A: Instruction Set Reference, A-M (PDF). Intel Corporation. May 2007. pp. 3–508. Archived from the original (PDF) on 2007-11-29.
https://www.owasp.org/index.php/Buffer_OverflowsBuffer Overflows article on OWASP Archived 2016-08-29 at the Wayback Machine
"Archived copy". wiretap.area.com. Archived from the original on 5 May 2001. Retrieved 6 June 2022.{{cite web}}: CS1 maint: archived copy as title (link)
"The Vstr Homepage". Archived from the original on 2017-03-05. Retrieved 2007-05-15.
"ProPolice at X.ORG". Archived from the original on 12 February 2007. Retrieved 2007-05-20.
"Bypassing Windows Hardware-enforced Data Execution Prevention". Archived from the original on 2007-04-30. Retrieved 2007-05-20.
"Protecting against Pointer Subterfuge (Kinda!)". msdn.com. Archived from the original on 2010-05-02. Retrieved 3 April 2018.
"Protecting against Pointer Subterfuge (Redux)". msdn.com. Archived from the original on 2009-12-19. Retrieved 3 April 2018.
"Openwall Linux kernel patch 2.4.34-ow1". Archived from the original on 2012-02-19. Retrieved 2007-06-03.
"Microsoft Technet: Data Execution Prevention". Archived from the original on 2006-06-22. Retrieved 2006-06-30.
"NGSec Stack Defender". Archived from the original on 2007-05-13. Retrieved 2007-06-03.
"Computer Security Technology Planning Study" (PDF). p. 61. Archived from the original (PDF) on 2011-07-21. Retrieved 2007-11-02.
""A Tour of The Worm" by Donn Seeley, University of Utah". Archived from the original on 2007-05-20. Retrieved 2007-06-03.
"Bugtraq security mailing list archive". Archived from the original on 2007-09-01. Retrieved 2007-06-03.
"eEye Digital Security". Archived from the original on 2009-06-20. Retrieved 2007-06-03.
"Microsoft Technet Security Bulletin MS02-039". Microsoft. Archived from the original on 2008-03-07. Retrieved 2007-06-03.
"Hacker breaks Xbox protection without mod-chip". Archived from the original on 2007-09-27. Retrieved 2007-06-03.

wiley.com (Global: 222^nd place; English: 297^th place)

onlinelibrary.wiley.com

Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

worldcat.org (Global: 5^th place; English: 5^th place)

search.worldcat.org

Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

x.org (Global: low place; English: low place)

wiki.x.org

"ProPolice at X.ORG". Archived from the original on 12 February 2007. Retrieved 2007-05-20.

Buffer overflow (English Wikipedia)

23.nu (Global: low place; English: low place)

c0re.23.nu

and.org (Global: low place; English: low place)

archive.today (Global: 14th place; English: 14th place)

area.com (Global: low place; English: low place)

wiretap.area.com

blackhat.com (Global: low place; English: low place)

box.sk (Global: low place; English: low place)

neworder.box.sk

cert.org (Global: low place; English: low place)

securecoding.cert.org

cplusplus.com (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

eeye.com (Global: low place; English: low place)

research.eeye.com

europa.eu (Global: 68th place; English: 117th place)

euvd.enisa.europa.eu

forth.gr (Global: low place; English: low place)

dcs.ics.forth.gr

fsf.org (Global: 8,472nd place; English: 7,926th place)

directory.fsf.org

gamesindustry.biz (Global: 1,124th place; English: 697th place)

ghostarchive.org (Global: 32nd place; English: 21st place)

grsecurity.net (Global: low place; English: low place)

pax.grsecurity.net

hitb.org (Global: low place; English: low place)

conference.hitb.org

ietf.org (Global: 214th place; English: 176th place)

datatracker.ietf.org

intel.com (Global: 1,118th place; English: 825th place)

developer.intel.com

iso.org (Global: 629th place; English: 610th place)

kde.org (Global: 8,253rd place; English: 6,484th place)

kerneltrap.org (Global: low place; English: low place)

metasploit.com (Global: low place; English: low place)

microsoft.com (Global: 153rd place; English: 151st place)

microsoft.com

technet2.microsoft.com

msdn.com (Global: 3,029th place; English: 2,272nd place)

blogs.msdn.com

net-security.org (Global: low place; English: low place)

ngsec.com (Global: low place; English: low place)

nist.gov (Global: 355th place; English: 454th place)

csrc.nist.gov

owasp.org (Global: low place; English: low place)

packetstormsecurity.com (Global: low place; English: low place)

packetstormsecurity.org (Global: low place; English: low place)

phrack.org (Global: low place; English: low place)

raykoid666.wordpress.com (Global: low place; English: low place)

rfc-editor.org (Global: 6,184th place; English: 4,465th place)

security-express.com (Global: low place; English: low place)

securityfocus.com (Global: low place; English: low place)

sf.net (Global: low place; English: low place)

bstring.sf.net

softpedia.com (Global: 3,250th place; English: 2,302nd place)

linux.softpedia.com

std.com (Global: low place; English: low place)

world.std.com

sys-manage.com (Global: low place; English: low place)

theiling.de (Global: low place; English: low place)

uninformed.org (Global: low place; English: low place)

usenix.org (Global: 5,990th place; English: 3,752nd place)

web.archive.org (Global: 1st place; English: 1st place)

wiley.com (Global: 222nd place; English: 297th place)

onlinelibrary.wiley.com

worldcat.org (Global: 5th place; English: 5th place)

search.worldcat.org

x.org (Global: low place; English: low place)

wiki.x.org

archive.today (Global: 14^th place; English: 14^th place)

doi.org (Global: 2^nd place; English: 2^nd place)

europa.eu (Global: 68^th place; English: 117^th place)

fsf.org (Global: 8,472^nd place; English: 7,926^th place)

gamesindustry.biz (Global: 1,124^th place; English: 697^th place)

ghostarchive.org (Global: 32^nd place; English: 21^st place)

ietf.org (Global: 214^th place; English: 176^th place)

intel.com (Global: 1,118^th place; English: 825^th place)

iso.org (Global: 629^th place; English: 610^th place)

kde.org (Global: 8,253^rd place; English: 6,484^th place)

microsoft.com (Global: 153^rd place; English: 151^st place)

msdn.com (Global: 3,029^th place; English: 2,272^nd place)

nist.gov (Global: 355^th place; English: 454^th place)

rfc-editor.org (Global: 6,184^th place; English: 4,465^th place)

softpedia.com (Global: 3,250^th place; English: 2,302^nd place)

usenix.org (Global: 5,990^th place; English: 3,752^nd place)

web.archive.org (Global: 1^st place; English: 1^st place)

wiley.com (Global: 222^nd place; English: 297^th place)

worldcat.org (Global: 5^th place; English: 5^th place)