Question

Is the program vulnerable? (i.e., can the attacker exploit the buffer overflow and alter the saved return address?) Explain your answer. (4 marks)

Answer 1

Answer:

The answer is "False".

Explanation:

Some information that could be true/false may be missing the given statement can be described as follows:  

• The given statement is false because the software is not responsive. The buffer begins on 0xbfffe780 and returns the new address, which starts with the 28 bytes, it is higher than at 0xbfffe79c, that's why it is necessary to override 25 bytes if you need to attach 32 bytes to overwrite the buffer.
• Vulnerability is also defined as a weakness that a malicious actor, for instance, to attach, an exploit to take illegal action inside a computer network.