Heap Overruns

• Considered dangerous for ages.

  • One would have to “get lucky” with a convenient pointer.

• Only mid 2002 – cookie-cut exploitation method.

• Related cousin – double free errors.