Buffer overflow (English Wikipedia)

Klein, Christian (September 2004). "Buffer Overflow" (PDF). Archived from the original (PDF) on 2007-09-28. {{cite journal}}: Cite journal requires |journal= (help)

and.org (Global: low place; English: low place)

"The Vstr Homepage". Archived from the original on 2017-03-05. Retrieved 2007-05-15.

area.com (Global: low place; English: low place)

wiretap.area.com

"Archived copy". wiretap.area.com. Archived from the original on 5 May 2001. Retrieved 6 June 2022.{{cite web}}: CS1 maint: archived copy as title (link)

blackhat.com (Global: low place; English: low place)

Ukai, Yuji; Soeder, Derek; Permeh, Ryan (2004). "Environment Dependencies in Windows Exploitation". BlackHat Japan. Japan: eEye Digital Security. Retrieved 2012-03-04.

box.sk (Global: low place; English: low place)

neworder.box.sk

Vangelis (2004-12-08). "Stack-based Overflow Exploit: Introduction to Classical and Advanced Overflow Technique". Wowhacker via Neworder. Archived from the original (text) on August 18, 2007. {{cite journal}}: Cite journal requires |journal= (help)

cert.org (Global: low place; English: low place)

securecoding.cert.org

"CERT Secure Coding Initiative". Retrieved 2007-07-30.{{cite web}}: CS1 maint: deprecated archival service (link)

cplusplus.com (Global: low place; English: low place)

"vector::at - C++ Reference". Cplusplus.com. Retrieved 2014-03-27.

doi.org (Global: 2^nd place; English: 2^nd place)

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.
Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

dtic.mil (Global: 934^th place; English: 530^th place)

apps.dtic.mil

Anderson, James P. Computer Security Technology Planning Study (Report). Vol. 2. p. 61. Retrieved 2026-01-03. By supplying addresses outside of the space allocated to the users [sic] program, it is often possible to get the monitor to obtain unauthorized data for that user, or at the very least, generate a set of conditions in the monitor that causes a system crash. ¶ In one contemporary operating system, one of the functions provided is to move limited amounts of information between system and user space. The code performing this function does not check the source and destination addresses properly, permitting portions of the monitor to be overlaid by the user. This can be used to inject code into the monitor that will permit the user to seize control of the machine. DTIC number AD0772806. (Volume 1 has DTIC no. AD0758206.)

eeye.com (Global: low place; English: low place)

research.eeye.com

"eEye Digital Security". Archived from the original on 2009-06-20. Retrieved 2007-06-03.

europa.eu (Global: 62^nd place; English: 100^th place)

euvd.enisa.europa.eu

"EUVD-2013-1371". European Union Vulnerability Database. 2025-10-22. Retrieved 2025-12-09.

forth.gr (Global: low place; English: low place)

dcs.ics.forth.gr

Akritidis, P.; Evangelos P. Markatos; M. Polychronakis; Kostas D. Anagnostakis (2005). "STRIDE: Polymorphic Sled Detection through Instruction Sequence Analysis." (PDF). Proceedings of the 20th IFIP International Information Security Conference (IFIP/SEC 2005). IFIP International Information Security Conference. Archived from the original (PDF) on 2012-09-01. Retrieved 2012-03-04.

fsf.org (Global: 8,097^th place; English: low place)

directory.fsf.org

"Libsafe at FSF.org". Retrieved 2007-05-20.

gamesindustry.biz (Global: 1,133^rd place; English: 707^th place)

"Hacker breaks Xbox protection without mod-chip". Archived from the original on 2007-09-27. Retrieved 2007-06-03.

ghostarchive.org (Global: 64^th place; English: 28^th place)

"Modern Overflow Targets" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2013-07-05.
"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks by Cowan et al" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2007-05-20.
"USENIX - The Advanced Computing Systems Association" (PDF). www.usenix.org. Archived (PDF) from the original on 2022-10-09. Retrieved 3 April 2018.

grsecurity.net (Global: low place; English: low place)

pax.grsecurity.net

"PaX: Homepage of the PaX team". Retrieved 2007-06-03.
"PaX at GRSecurity.net". Retrieved 2007-06-03.

hitb.org (Global: low place; English: low place)

conference.hitb.org

Shah, Saumil (2006). "Writing Metasploit Plugins: from vulnerability to exploit" (PDF). Hack In The Box. Kuala Lumpur. Retrieved 2012-03-04.

ietf.org (Global: 731^st place; English: 625^th place)

datatracker.ietf.org

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.

intel.com (Global: 1,727^th place; English: 1,234^th place)

developer.intel.com

Intel 64 and IA-32 Architectures Software Developer's Manual Volume 2A: Instruction Set Reference, A-M (PDF). Intel Corporation. May 2007. pp. 3–508. Archived from the original (PDF) on 2007-11-29.

iso.org (Global: 1,190^th place; English: 1,097^th place)

International Organization for Standardization (2007). "Information technology – Programming languages, their environments and system software interfaces – Extensions to the C library – Part 1: Bounds-checking interfaces". ISO Online Browsing Platform.

kde.org (Global: 4,489^th place; English: 4,647^th place)

"Krita: Heap-based buffer overflow when parsing TGA files". KDE Project. Retrieved 2025-12-08.{{cite web}}: CS1 maint: url-status (link)

kerneltrap.org (Global: low place; English: low place)

"KernelTrap.Org". Retrieved 2007-06-03.{{cite web}}: CS1 maint: deprecated archival service (link)

metasploit.com (Global: low place; English: low place)

"The Metasploit Opcode Database". Archived from the original on 12 May 2007. Retrieved 2007-05-15.

microsoft.com (Global: 263^rd place; English: 259^th place)

microsoft.com

"Microsoft Technet Security Bulletin MS04-028". Microsoft. Archived from the original on 2011-08-04. Retrieved 2007-05-15.
"Microsoft Technet Security Bulletin MS02-039". Microsoft. Archived from the original on 2008-03-07. Retrieved 2007-06-03.

technet2.microsoft.com

"Microsoft Technet: Data Execution Prevention". Archived from the original on 2006-06-22. Retrieved 2006-06-30.

msdn.com (Global: 4,626^th place; English: 3,858^th place)

blogs.msdn.com

"Protecting against Pointer Subterfuge (Kinda!)". msdn.com. Archived from the original on 2010-05-02. Retrieved 3 April 2018.
"Protecting against Pointer Subterfuge (Redux)". msdn.com. Archived from the original on 2009-12-19. Retrieved 3 April 2018.

net-security.org (Global: low place; English: low place)

"Creating Arbitrary Shellcode In Unicode Expanded Strings" (PDF). Archived from the original (PDF) on 2006-01-05. Retrieved 2007-05-15.

ngsec.com (Global: low place; English: low place)

"NGSec Stack Defender". Archived from the original on 2007-05-13. Retrieved 2007-06-03.

owasp.org (Global: low place; English: low place)

https://www.owasp.org/index.php/Buffer_OverflowsBuffer Overflows article on OWASP Archived 2016-08-29 at the Wayback Machine

packetstormsecurity.com (Global: low place; English: low place)

"Modern Overflow Targets" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2013-07-05.

packetstormsecurity.org (Global: low place; English: low place)

Alvarez, Sergio (2004-09-05). "Win32 Stack BufferOverFlow Real Life Vuln-Dev Process" (PDF). IT Security Consulting. Retrieved 2012-03-04. {{cite journal}}: Cite journal requires |journal= (help)

phrack.org (Global: low place; English: low place)

""Smashing the Stack for Fun and Profit" by Aleph One". Retrieved 2025-03-06.

raykoid666.wordpress.com (Global: low place; English: low place)

"The Exploitant - Security info and tutorials". Retrieved 2009-11-29.

rfc-editor.org (Global: 747^th place; English: 325^th place)

R. Shirey (August 2007). Internet Security Glossary, Version 2. Network Working Group. doi:10.17487/RFC4949. RFC 4949. Informational.

security-express.com (Global: low place; English: low place)

"Bugtraq security mailing list archive". Archived from the original on 2007-09-01. Retrieved 2007-06-03.

securityfocus.com (Global: low place; English: low place)

"CORE-2007-0219: OpenBSD's IPv6 mbufs remote kernel buffer overflow". Retrieved 2007-05-15.

sf.net (Global: low place; English: low place)

bstring.sf.net

"The Better String Library".

softpedia.com (Global: 4,174^th place; English: 3,327^th place)

linux.softpedia.com

"Openwall Linux kernel patch 2.4.34-ow1". Archived from the original on 2012-02-19. Retrieved 2007-06-03.

std.com (Global: low place; English: low place)

world.std.com

""A Tour of The Worm" by Donn Seeley, University of Utah". Archived from the original on 2007-05-20. Retrieved 2007-06-03.

sys-manage.com (Global: low place; English: low place)

"BufferShield: Prevention of Buffer Overflow Exploitation for Windows". Retrieved 2007-06-03.

theiling.de (Global: low place; English: low place)

"The Erwin Homepage". Retrieved 2007-05-15.

uninformed.org (Global: low place; English: low place)

"Bypassing Windows Hardware-enforced Data Execution Prevention". Archived from the original on 2007-04-30. Retrieved 2007-05-20.

usenix.org (Global: 7,359^th place; English: 4,657^th place)

"StackGuard: Automatic Adaptive Detection and Prevention of Buffer-Overflow Attacks by Cowan et al" (PDF). Archived (PDF) from the original on 2022-10-09. Retrieved 2007-05-20.
"12th USENIX Security Symposium – Technical Paper". www.usenix.org. Retrieved 3 April 2018.
"USENIX - The Advanced Computing Systems Association" (PDF). www.usenix.org. Archived (PDF) from the original on 2022-10-09. Retrieved 3 April 2018.
Larochelle, David; Evans, David (13 August 2001). "Statically Detecting Likely Buffer Overflow Vulnerabilities". USENIX Security Symposium. 32.

web.archive.org (Global: 1^st place; English: 1^st place)

"The Metasploit Opcode Database". Archived from the original on 12 May 2007. Retrieved 2007-05-15.
"Microsoft Technet Security Bulletin MS04-028". Microsoft. Archived from the original on 2011-08-04. Retrieved 2007-05-15.
"Creating Arbitrary Shellcode In Unicode Expanded Strings" (PDF). Archived from the original (PDF) on 2006-01-05. Retrieved 2007-05-15.
Vangelis (2004-12-08). "Stack-based Overflow Exploit: Introduction to Classical and Advanced Overflow Technique". Wowhacker via Neworder. Archived from the original (text) on August 18, 2007. {{cite journal}}: Cite journal requires |journal= (help)
Balaban, Murat. "Buffer Overflows Demystified". Enderunix.org. Archived from the original on August 12, 2004. {{cite journal}}: Cite journal requires |journal= (help)
Akritidis, P.; Evangelos P. Markatos; M. Polychronakis; Kostas D. Anagnostakis (2005). "STRIDE: Polymorphic Sled Detection through Instruction Sequence Analysis." (PDF). Proceedings of the 20th IFIP International Information Security Conference (IFIP/SEC 2005). IFIP International Information Security Conference. Archived from the original (PDF) on 2012-09-01. Retrieved 2012-03-04.
Klein, Christian (September 2004). "Buffer Overflow" (PDF). Archived from the original (PDF) on 2007-09-28. {{cite journal}}: Cite journal requires |journal= (help)
Intel 64 and IA-32 Architectures Software Developer's Manual Volume 2A: Instruction Set Reference, A-M (PDF). Intel Corporation. May 2007. pp. 3–508. Archived from the original (PDF) on 2007-11-29.
https://www.owasp.org/index.php/Buffer_OverflowsBuffer Overflows article on OWASP Archived 2016-08-29 at the Wayback Machine
"Archived copy". wiretap.area.com. Archived from the original on 5 May 2001. Retrieved 6 June 2022.{{cite web}}: CS1 maint: archived copy as title (link)
"The Vstr Homepage". Archived from the original on 2017-03-05. Retrieved 2007-05-15.
"ProPolice at X.ORG". Archived from the original on 12 February 2007. Retrieved 2007-05-20.
"Bypassing Windows Hardware-enforced Data Execution Prevention". Archived from the original on 2007-04-30. Retrieved 2007-05-20.
"Protecting against Pointer Subterfuge (Kinda!)". msdn.com. Archived from the original on 2010-05-02. Retrieved 3 April 2018.
"Protecting against Pointer Subterfuge (Redux)". msdn.com. Archived from the original on 2009-12-19. Retrieved 3 April 2018.
"Openwall Linux kernel patch 2.4.34-ow1". Archived from the original on 2012-02-19. Retrieved 2007-06-03.
"Microsoft Technet: Data Execution Prevention". Archived from the original on 2006-06-22. Retrieved 2006-06-30.
"NGSec Stack Defender". Archived from the original on 2007-05-13. Retrieved 2007-06-03.
""A Tour of The Worm" by Donn Seeley, University of Utah". Archived from the original on 2007-05-20. Retrieved 2007-06-03.
"Bugtraq security mailing list archive". Archived from the original on 2007-09-01. Retrieved 2007-06-03.
"eEye Digital Security". Archived from the original on 2009-06-20. Retrieved 2007-06-03.
"Microsoft Technet Security Bulletin MS02-039". Microsoft. Archived from the original on 2008-03-07. Retrieved 2007-06-03.
"Hacker breaks Xbox protection without mod-chip". Archived from the original on 2007-09-27. Retrieved 2007-06-03.

wiley.com (Global: 150^th place; English: 174^th place)

onlinelibrary.wiley.com

Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

worldcat.org (Global: 4^th place; English: 4^th place)

search.worldcat.org

Lhee, Kyung-Suk; Chapin, Steve J. (2003-04-25). "Buffer overflow and format string overflow vulnerabilities". Software: Practice and Experience. 33 (5): 423–460. doi:10.1002/spe.515. ISSN 0038-0644.

x.org (Global: low place; English: low place)

wiki.x.org

"ProPolice at X.ORG". Archived from the original on 12 February 2007. Retrieved 2007-05-20.

Buffer overflow (English Wikipedia)

23.nu (Global: low place; English: low place)

c0re.23.nu

and.org (Global: low place; English: low place)

area.com (Global: low place; English: low place)

wiretap.area.com

blackhat.com (Global: low place; English: low place)

box.sk (Global: low place; English: low place)

neworder.box.sk

cert.org (Global: low place; English: low place)

securecoding.cert.org

cplusplus.com (Global: low place; English: low place)

doi.org (Global: 2nd place; English: 2nd place)

dtic.mil (Global: 934th place; English: 530th place)

apps.dtic.mil

eeye.com (Global: low place; English: low place)

research.eeye.com

europa.eu (Global: 62nd place; English: 100th place)

euvd.enisa.europa.eu

forth.gr (Global: low place; English: low place)

dcs.ics.forth.gr

fsf.org (Global: 8,097th place; English: low place)

directory.fsf.org

gamesindustry.biz (Global: 1,133rd place; English: 707th place)

ghostarchive.org (Global: 64th place; English: 28th place)

grsecurity.net (Global: low place; English: low place)

pax.grsecurity.net

hitb.org (Global: low place; English: low place)

conference.hitb.org

ietf.org (Global: 731st place; English: 625th place)

datatracker.ietf.org

intel.com (Global: 1,727th place; English: 1,234th place)

developer.intel.com

iso.org (Global: 1,190th place; English: 1,097th place)

kde.org (Global: 4,489th place; English: 4,647th place)

kerneltrap.org (Global: low place; English: low place)

metasploit.com (Global: low place; English: low place)

microsoft.com (Global: 263rd place; English: 259th place)

microsoft.com

technet2.microsoft.com

msdn.com (Global: 4,626th place; English: 3,858th place)

blogs.msdn.com

net-security.org (Global: low place; English: low place)

ngsec.com (Global: low place; English: low place)

owasp.org (Global: low place; English: low place)

packetstormsecurity.com (Global: low place; English: low place)

packetstormsecurity.org (Global: low place; English: low place)

phrack.org (Global: low place; English: low place)

raykoid666.wordpress.com (Global: low place; English: low place)

rfc-editor.org (Global: 747th place; English: 325th place)

security-express.com (Global: low place; English: low place)

securityfocus.com (Global: low place; English: low place)

sf.net (Global: low place; English: low place)

bstring.sf.net

softpedia.com (Global: 4,174th place; English: 3,327th place)

linux.softpedia.com

std.com (Global: low place; English: low place)

world.std.com

sys-manage.com (Global: low place; English: low place)

theiling.de (Global: low place; English: low place)

uninformed.org (Global: low place; English: low place)

usenix.org (Global: 7,359th place; English: 4,657th place)

web.archive.org (Global: 1st place; English: 1st place)

wiley.com (Global: 150th place; English: 174th place)

onlinelibrary.wiley.com

worldcat.org (Global: 4th place; English: 4th place)

search.worldcat.org

x.org (Global: low place; English: low place)

wiki.x.org

doi.org (Global: 2^nd place; English: 2^nd place)

dtic.mil (Global: 934^th place; English: 530^th place)

europa.eu (Global: 62^nd place; English: 100^th place)

fsf.org (Global: 8,097^th place; English: low place)

gamesindustry.biz (Global: 1,133^rd place; English: 707^th place)

ghostarchive.org (Global: 64^th place; English: 28^th place)

ietf.org (Global: 731^st place; English: 625^th place)

intel.com (Global: 1,727^th place; English: 1,234^th place)

iso.org (Global: 1,190^th place; English: 1,097^th place)

kde.org (Global: 4,489^th place; English: 4,647^th place)

microsoft.com (Global: 263^rd place; English: 259^th place)

msdn.com (Global: 4,626^th place; English: 3,858^th place)

rfc-editor.org (Global: 747^th place; English: 325^th place)

softpedia.com (Global: 4,174^th place; English: 3,327^th place)

usenix.org (Global: 7,359^th place; English: 4,657^th place)

web.archive.org (Global: 1^st place; English: 1^st place)

wiley.com (Global: 150^th place; English: 174^th place)

worldcat.org (Global: 4^th place; English: 4^th place)