Câu 33: ECSAV10: EC-Council Certified Security Analyst

The penetration testing team of MirTech Inc. identified the presence of various vulnerabilities in the web application coding. They prepared a detailed report addressing to the web developers regarding the findings. In the report, the penetration testing team advised the web developers to avoid the use of dangerous standard library functions. They also informed the web developers that the web application copies the data without checking whether it fits into the target destination memory and is susceptible in supplying the application with large amount of data. According to the findings by the penetration testing team, which type of attack was possible on the web application?

1. A. Buffer overflow — đáp án hiện tại
2. B. SQL injection
3. C. Cross-site scripting
4. D. Denial-of-service