Deck 12: Buffer Overflows

Question 1

Buffer overflow is a condition common to structured programming languages such as the "C" language.

Answer 1

True

Question 2

Functions use variables to store values that may be stored temporarily or permanently.

Answer 2

True

Question 3

Buffer overflows are always intentional attacks.

Answer 3

False

Question 4

A stack cannot store details regarding the function that called the currently executing function.

Question 5

A heap provides a permanent memory space unlike the temporary memory space that is provided by a stack.

Question 6

The "____" language was used to write utilities and operating systems, including UNIX and Windows.

A)C
B)Java
C)Basic
D)Fortran

Question 7

When a user requests to execute a "C" program file, the primary function referred to is the ____ function.

A)start
B)open
C)load
D)main

Question 8

The ____ bug targets the variables that are used by functions to store values.

A)overload
B)buffer overflow
C)flood
D)DoS

Question 9

To circumvent stack buffer overflows, programmers create applications that do not allow extra characters to be accepted by a variable making the traditional buffer overflow method problematic. This check can be bypassed by using the ____ method.

A)character hashing
B)nybble-to-byte compression
C)character-set decoding
D)set encryption

Question 10

The ____ function is a secure replacement for the gets() function.

A)strncat()
B)snprintf()
C)strncpy()
D)fgets()

Question 11

____________________ happens when input applied to a variable is larger than the memory allotted to that variable.

Question 12

____________________ has a goal of overloading the memory space provided to the variable. This might either allow the attacker to crash the computer or break into it.

Question 13

On some specific operating systems, the kernel can be patched in such a way that running processes are not affected by buffer overflow conditions. This patch is called ______________________________.

Question 14

Buffer overflows can be divided into two categories: _________________________ and heap overflow.

Question 15

A(n) ____________________ is known as the corruption of the instruction pointer, which points to the memory area where the function to be executed is stored.

Question 16

How can buffer overflows be avoided?

Question 17

Why do programs need a memory stack area?

Question 18

What are the steps involved in a buffer overflow exploit?