Testing for Heap Overflow  Revision as of 16:08, 9 February 2009
by KirstenS (Talk | contribs)  Jump to: navigation, search
OWASP Testing Guide v3 Table of Contents    Brief Summary  In
this test we check whether a tester can make a Heap overflow
that exploits a memory segment.  Description of the Issue   When
a heap-based buffer is overflowed the control information in
these tags is overwritten. When the heap management routine
frees the buffer, a memory address overwrite takes place leading
to an access violation. When the overflow is executed in a
controlled fashion, the vulnerability would allow an adversary
to overwrite a desired memory location with a user-controlled
value. In practice, an attacker would be able to overwrite
function pointers and various addresses stored in structures
like GOT, .dtors or TEB with the address of a malicious payload.
There are numerous variants of the heap overflow (heap
corruption) vulnerability that can allow anything from
overwriting function pointers to exploiting m