I have read a bit about buffer overflows, one thing I don't understand is that normally space isn't executable to my knowledge, how can code placed in it be run?
-
1Exploits stopped executing code from the stack (or any non-code buffer, see W^X) long time ago. You way may want to check ROP, ret2glibc, JOP and similar.– Margaret BloomMay 20 at 14:32
-
1The original 32-bit paging in x86 had no NX bit, you needed PAE or 64-bit mode for that (both of them use 64-bit page table entries with an NX bit). Segments on x86 can be marked as non-executable but segments mostly fell out of use, so for a while it was possible to execute data on the stack.– user555045May 20 at 18:06
Add a comment
|