Login Register






The stories and information posted here are artistic works of fiction and falsehood. Only a fool would take anything posted here as fact.
Thread Rating:
  • 0 Vote(s) - 0 Average


What are some low level vulns? filter_list
Author
Message
RE: What are some low level vulns? #7
Integer overflow - Integer overflow is the result of trying to place into computer memory an integer hat is too large for the integer data type in a given system. I think there was such vulnerability in Adobe Flash before a few mouths(or years not sure).
You may like this page http://phrack.org/issues/60/10.html#article
But in my opinion the most recent vulnerability is wrong programming logic.
For example let's say that you have to check if a number is >= 0 and < 1000000 in C++ you will implement it like this:
Code:
if(number <= 0 || number > 1000000){
Do something
}
But a lot of programmers make this mistake:
Code:
if(number < 0 || number > 1000000){
Do something
}

Now the user can provide 0 as value, and the program may go wrong.

Reply





Messages In This Thread
What are some low level vulns? - by Alan Turing - 05-07-2014, 10:58 PM
RE: What are some low level vulns? - by misnar - 05-07-2014, 10:59 PM
RE: What are some low level vulns? - by w00t - 05-08-2014, 01:30 AM
RE: What are some low level vulns? - by xornull - 05-08-2014, 04:30 AM
RE: What are some low level vulns? - by Merkuri - 07-18-2014, 10:45 PM



Users browsing this thread: 1 Guest(s)