Heap Overruns – Until 2002

• Analyze the heap – search for convenient pointers.

• Exploit code highly dependant on exact program state.

• Even so – extremely dangerous to assume any given buffer overrun is safe.