According to an article I just read, the functions
strcpy are considered security vulnerabilities due to Buffer overflows. I understand how
strcpy is vulnerable, but could someone possibly explain how/if printf is really vulnerable, or I am just understanding it wrong.
Here is the article: https://www.digitalbond.com/blog/2012/09/06/100000-vulnerabilities/#more-11658
The specific snippet is :
The vendor had mechanically searched the source code and found some 50,000-odd uses of buffer-overflow-capable C library functions such as “strcpy()” and “printf().”