Timeline for format string vulnerability - printf
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Nov 24, 2023 at 22:24 | comment | added | Dražen Grašovec | i tried to recreate this in code. But I found format string and arguments to prontf() were passed to printf() not on the stack but in CPU registers. i just tried to pass 2 format strings and 2 integers, and they all were passed in registers. So i guess it depends on compiler and architecture if this technique can be exploited for stack attack | |
| Apr 15, 2011 at 7:20 | vote | accept | Vikas Yendluri | ||
| Apr 15, 2011 at 7:09 | history | answered | Michael Burr | CC BY-SA 3.0 |