Why use buffer overflow exploit?

Question

I understand the concept of buffer overflow, and acknowledge it can give me the opportunity to execute my own code within a foreign executable.

My question is, cant this simply be done with easier ways ?

Say inject a DLL, and in DLLMain write your malicious code ?

Or play with the disassembly and inject assembly code into executable ?

And even if you got your malicious code working, what damage\profit can you get by the act, that you could not get by editing the disassembly by yourself ?

As far as I understand, the moment you got an executable in your hands you are the master of it, and can add\change\remove code by playing with the disassembly, why make all the effort for searching for exploits ?

Thanks, Michael.

cnicutar · Accepted Answer · 2012-04-24 09:53:28Z

4

Thing is, you don't generally get the victim to run your executable. So the fact that you can make it malicious is of little value.

Instead you can get the potential victim to use your input: that's why it's so interesting.

answered Apr 24, 2012 at 9:53

cnicutar

184k26 gold badges378 silver badges398 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Michael Over a year ago

I may understand the profit of attacking web\servers based applications. But I still dont understand what profit I can earn by attacking a normal desktop application. Say I bought "Word 2010" and found a buffer overflow exploit in the application, what can I gain by exploiting it ?

cnicutar Over a year ago

@MichaelEngstler Nothing. But what if you attack an application that is already running with higher privileges than you are ?

Colin Valliant Over a year ago

Say you find a buffer overflow in Word 2010 that can be exploited from a specially crafted Word document. Now you just need to trick someone into opening your "document" instead of running your suspicious binary.

C0deH4cker · Accepted Answer · 2012-05-07 22:24:13Z

Most of the time, this is due to the skeptical minds of users nowadays towards executables, and how they do not think that a PDF document could contain a virus. In other situations, the only way to deliver the code is through an exploit, such as a buffer/heap/stack overflow.

For example, on Apple iOS devices, the only way to download executable code is through the AppStore. All executables that come this way must be explicitly approved of by Apple. On the other hand, if the user simply visits a link to a maliciously crafted PDF document in MobileSafari, it could allow an attacker to arbitrarily execute code on the device.

This is the case with Comex's JailbreakMe.com site (both v2.0 (Star) and v3.0 (Saffron)). The site has the device load an incredibly intricate PDF file that ultimately leads to jailbreaking the device. There is no chance in the world that Apple would approve of an app that would do the same thing.

Collectives™ on Stack Overflow

Why use buffer overflow exploit?

2 Answers 2

3 Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related