Buffer overflow (English Wikipedia)

Klein, Christian (September 2004). "Buffer Overflow" (PDF). Archived from the original (PDF) on 2007-09-28. {{cite journal}}: Cite journal requires |journal= (help)

and.org

"The Vstr Homepage". Archived from the original on 2017-03-05. Retrieved 2007-05-15.

archive.today

"CERT Secure Coding Initiative". Archived from the original on December 28, 2012. Retrieved 2007-07-30.
"KernelTrap.Org". Archived from the original on 2012-05-29. Retrieved 2007-06-03.

area.com

wiretap.area.com

"Archived copy". wiretap.area.com. Archived from the original on 5 May 2001. Retrieved 6 June 2022.{{cite web}}: CS1 maint: archived copy as title (link)

blackhat.com

Ukai, Yuji; Soeder, Derek; Permeh, Ryan (2004). "Environment Dependencies in Windows Exploitation". BlackHat Japan. Japan: eEye Digital Security. Retrieved 2012-03-04.

box.sk

neworder.box.sk

Vangelis (2004-12-08). "Stack-based Overflow Exploit: Introduction to Classical and Advanced Overflow Technique". Wowhacker via Neworder. Archived from the original (text) on August 18, 2007. {{cite journal}}: Cite journal requires |journal= (help)

cert.org

securecoding.cert.org

"CERT Secure Coding Initiative". Archived from the original on December 28, 2012. Retrieved 2007-07-30.

cplusplus.com

"vector::at - C++ Reference". Cplusplus.com. Retrieved 2014-03-27.

doi.org

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.
Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

eeye.com

research.eeye.com

"eEye Digital Security". Archived from the original on 2009-06-20. Retrieved 2007-06-03.

enderunix.org

Balaban, Murat. "Buffer Overflows Demystified" (text). Enderunix.org. {{cite journal}}: Cite journal requires |journal= (help)

forth.gr

dcs.ics.forth.gr

Akritidis, P.; Evangelos P. Markatos; M. Polychronakis; Kostas D. Anagnostakis (2005). "STRIDE: Polymorphic Sled Detection through Instruction Sequence Analysis." (PDF). Proceedings of the 20th IFIP International Information Security Conference (IFIP/SEC 2005). IFIP International Information Security Conference. Archived from the original (PDF) on 2012-09-01. Retrieved 2012-03-04.

fsf.org

directory.fsf.org

"Libsafe at FSF.org". Retrieved 2007-05-20.

gamesindustry.biz

"Hacker breaks Xbox protection without mod-chip". Archived from the original on 2007-09-27. Retrieved 2007-06-03.

ghostarchive.org

"Modern Overflow Targets" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2013-07-05.
"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks by Cowan et al" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2007-05-20.
"USENIX - The Advanced Computing Systems Association" (PDF). www.usenix.org. Archived (PDF) from the original on 2022-10-09. Retrieved 3 April 2018.

grsecurity.net

pax.grsecurity.net

"PaX: Homepage of the PaX team". Retrieved 2007-06-03.
"PaX at GRSecurity.net". Retrieved 2007-06-03.

hitb.org

conference.hitb.org

Shah, Saumil (2006). "Writing Metasploit Plugins: from vulnerability to exploit" (PDF). Hack In The Box. Kuala Lumpur. Retrieved 2012-03-04.

ietf.org

datatracker.ietf.org

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.

intel.com

developer.intel.com

Intel 64 and IA-32 Architectures Software Developer's Manual Volume 2A: Instruction Set Reference, A-M (PDF). Intel Corporation. May 2007. pp. 3–508. Archived from the original (PDF) on 2007-11-29.

iso.org

International Organization for Standardization (2007). "Information technology – Programming languages, their environments and system software interfaces – Extensions to the C library – Part 1: Bounds-checking interfaces". ISO Online Browsing Platform.

kerneltrap.org

"KernelTrap.Org". Archived from the original on 2012-05-29. Retrieved 2007-06-03.

metasploit.com

"The Metasploit Opcode Database". Archived from the original on 12 May 2007. Retrieved 2007-05-15.

microsoft.com

"Microsoft Technet Security Bulletin MS04-028". Microsoft. Archived from the original on 2011-08-04. Retrieved 2007-05-15.
"Microsoft Technet Security Bulletin MS02-039". Microsoft. Archived from the original on 2008-03-07. Retrieved 2007-06-03.

technet2.microsoft.com

"Microsoft Technet: Data Execution Prevention". Archived from the original on 2006-06-22. Retrieved 2006-06-30.

msdn.com

blogs.msdn.com

"Protecting against Pointer Subterfuge (Kinda!)". msdn.com. Archived from the original on 2010-05-02. Retrieved 3 April 2018.
"Protecting against Pointer Subterfuge (Redux)". msdn.com. Archived from the original on 2009-12-19. Retrieved 3 April 2018.

net-security.org

"Creating Arbitrary Shellcode In Unicode Expanded Strings" (PDF). Archived from the original (PDF) on 2006-01-05. Retrieved 2007-05-15.

ngsec.com

"NGSec Stack Defender". Archived from the original on 2007-05-13. Retrieved 2007-06-03.

nist.gov

csrc.nist.gov

"Computer Security Technology Planning Study" (PDF). p. 61. Archived from the original (PDF) on 2011-07-21. Retrieved 2007-11-02.

owasp.org

https://www.owasp.org/index.php/Buffer_OverflowsBuffer Overflows article on OWASP Archived 2016-08-29 at the Wayback Machine

packetstormsecurity.com

"Modern Overflow Targets" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2013-07-05.

packetstormsecurity.org

Alvarez, Sergio (2004-09-05). "Win32 Stack BufferOverFlow Real Life Vuln-Dev Process" (PDF). IT Security Consulting. Retrieved 2012-03-04. {{cite journal}}: Cite journal requires |journal= (help)

phrack.com

""Smashing the Stack for Fun and Profit" by Aleph One". Retrieved 2012-09-05.

raykoid666.wordpress.com

"The Exploitant - Security info and tutorials". Retrieved 2009-11-29.

security-express.com

"Bugtraq security mailing list archive". Archived from the original on 2007-09-01. Retrieved 2007-06-03.

securityfocus.com

"CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow". Retrieved 2007-05-15.

sf.net

bstring.sf.net

"The Better String Library".

softpedia.com

linux.softpedia.com

"Openwall Linux kernel patch 2.4.34-ow1". Archived from the original on 2012-02-19. Retrieved 2007-06-03.

std.com

world.std.com

""A Tour of The Worm" by Donn Seeley, University of Utah". Archived from the original on 2007-05-20. Retrieved 2007-06-03.

sys-manage.com

"BufferShield: Prevention of Buffer Overflow Exploitation for Windows". Retrieved 2007-06-03.

theiling.de

"The Erwin Homepage". Retrieved 2007-05-15.

uninformed.org

"Bypassing Windows Hardware-enforced Data Execution Prevention". Archived from the original on 2007-04-30. Retrieved 2007-05-20.

usenix.org

"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks by Cowan et al" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2007-05-20.
"12th USENIX Security Symposium – Technical Paper". www.usenix.org. Retrieved 3 April 2018.
"USENIX - The Advanced Computing Systems Association" (PDF). www.usenix.org. Archived (PDF) from the original on 2022-10-09. Retrieved 3 April 2018.
Larochelle, David; Evans, David (13 August 2001). "Statically Detecting Likely Buffer Overflow Vulnerabilities". USENIX Security Symposium. 32.

web.archive.org

"The Metasploit Opcode Database". Archived from the original on 12 May 2007. Retrieved 2007-05-15.
"Microsoft Technet Security Bulletin MS04-028". Microsoft. Archived from the original on 2011-08-04. Retrieved 2007-05-15.
"Creating Arbitrary Shellcode In Unicode Expanded Strings" (PDF). Archived from the original (PDF) on 2006-01-05. Retrieved 2007-05-15.
Vangelis (2004-12-08). "Stack-based Overflow Exploit: Introduction to Classical and Advanced Overflow Technique". Wowhacker via Neworder. Archived from the original (text) on August 18, 2007. {{cite journal}}: Cite journal requires |journal= (help)
Akritidis, P.; Evangelos P. Markatos; M. Polychronakis; Kostas D. Anagnostakis (2005). "STRIDE: Polymorphic Sled Detection through Instruction Sequence Analysis." (PDF). Proceedings of the 20th IFIP International Information Security Conference (IFIP/SEC 2005). IFIP International Information Security Conference. Archived from the original (PDF) on 2012-09-01. Retrieved 2012-03-04.
Klein, Christian (September 2004). "Buffer Overflow" (PDF). Archived from the original (PDF) on 2007-09-28. {{cite journal}}: Cite journal requires |journal= (help)
Intel 64 and IA-32 Architectures Software Developer's Manual Volume 2A: Instruction Set Reference, A-M (PDF). Intel Corporation. May 2007. pp. 3–508. Archived from the original (PDF) on 2007-11-29.
https://www.owasp.org/index.php/Buffer_OverflowsBuffer Overflows article on OWASP Archived 2016-08-29 at the Wayback Machine
"Archived copy". wiretap.area.com. Archived from the original on 5 May 2001. Retrieved 6 June 2022.{{cite web}}: CS1 maint: archived copy as title (link)
"The Vstr Homepage". Archived from the original on 2017-03-05. Retrieved 2007-05-15.
"ProPolice at X.ORG". Archived from the original on 12 February 2007. Retrieved 2007-05-20.
"Bypassing Windows Hardware-enforced Data Execution Prevention". Archived from the original on 2007-04-30. Retrieved 2007-05-20.
"Protecting against Pointer Subterfuge (Kinda!)". msdn.com. Archived from the original on 2010-05-02. Retrieved 3 April 2018.
"Protecting against Pointer Subterfuge (Redux)". msdn.com. Archived from the original on 2009-12-19. Retrieved 3 April 2018.
"Openwall Linux kernel patch 2.4.34-ow1". Archived from the original on 2012-02-19. Retrieved 2007-06-03.
"Microsoft Technet: Data Execution Prevention". Archived from the original on 2006-06-22. Retrieved 2006-06-30.
"NGSec Stack Defender". Archived from the original on 2007-05-13. Retrieved 2007-06-03.
"Computer Security Technology Planning Study" (PDF). p. 61. Archived from the original (PDF) on 2011-07-21. Retrieved 2007-11-02.
""A Tour of The Worm" by Donn Seeley, University of Utah". Archived from the original on 2007-05-20. Retrieved 2007-06-03.
"Bugtraq security mailing list archive". Archived from the original on 2007-09-01. Retrieved 2007-06-03.
"eEye Digital Security". Archived from the original on 2009-06-20. Retrieved 2007-06-03.
"Microsoft Technet Security Bulletin MS02-039". Microsoft. Archived from the original on 2008-03-07. Retrieved 2007-06-03.
"Hacker breaks Xbox protection without mod-chip". Archived from the original on 2007-09-27. Retrieved 2007-06-03.

wiley.com

onlinelibrary.wiley.com

Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

worldcat.org

search.worldcat.org

Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

x.org

wiki.x.org

"ProPolice at X.ORG". Archived from the original on 12 February 2007. Retrieved 2007-05-20.