What Can be Done?

• Query parameters from the stack

  • %x, %d etc.

• Query data from anywhere in the program

  • %s when the pointer is inside the buffer to get info from anywhere.
  • Passwords, private keys.....

• Crash the program

  • %s from non-readable memory.
  • %f wich requires to devide by zero.