what is an AVM stack overflow?

[Chiefcrowe]

I just heard about this vulnerability and was wondering what exactly it was?

 

[Cogman]

http://www.securityfocus.com/bid/49714/discuss

Looks like a buffer overflow. Code and data are really closely linked together. Whenever you call a function, things like function return addresses are stored on the stack. Because the way the stack grows, if someone puts too much data on the stack they might overwrite the return address.

This allows the attacker to insert code, change the way functions behave, etc. All by providing a bigger input than expected.

 

[Chiefcrowe]

thank you.. sneaky!