The penetration testing team of MirTech Inc. identified the presence of various vulnerabilities in the web application coding. They prepared a detailed report addressing to the web developers regarding the findings. In the report, the penetration testing team advised the web developers to avoid the use of dangerous standard library functions. They also informed the web developers that the web application copies the data without checking whether it fits into the target destination memory and is susceptible in supplying the application with large amount of data. According to the findings by the penetration testing team, which type of attack was possible on the web application?

Question

Quizplus · Accepted Answer

The description of copying data without checking if it fits into the target memory is indicative of a buffer overflow vulnerability, where excess data can overwrite adjacent memory, potentially leading to arbitrary code execution or crashes.

The Penetration Testing Team of MirTech Inc