I've been practicing some computer security courses lately, and I'm bugged by one specific heap overflow that just doesn't work for me. Taken from The Shellcoder's handbook, chapter 5. While doing my homework, I've come across a question that has my exact problem. Here's the question.

So now, after reading the answers, is it a fool proof statement to say that heap exploits via metadata corruption are now a thing of the past? Additionally, somehow I have begun to feel that the only reliable heap exploits these days are UAFs and heap sprays. I have failed to reproduce even the double free exploits on my Ubuntu 14.04 LTS machine. Is this just me? Are heap metadata corruption attacks now obsolete?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.