Question

Why apps developed in languages like C, C++ is prone to Buffer-overflow?

(a) No string boundary checks in predefined functions

(b) No storage check in the external memory

(c) No processing power check

(d) No database check

I have been asked this question in an interview for internship.

The above asked question is from Buffer Overflow in portion Cyber Security of Cyber Security

Answer 1

Correct choice is (a) No string boundary checks in predefined functions

For explanation I would say: The strcat(), strcpy(), sprintf(), gets() etc when called in C and C++ can be exploited because these functions don’t check whether the stack is large enough for storing the data fetched from some other variable holding larger data.