Buffer overflow or overrun?

["Alberto Cozer" <acozer () fti com br>]

Hello, All!

I've been reading the last Microsoft advisories and one of the
vulnerabilities descriptions made me
think about buffer overrun.

The description for the HTTP header delimiters vulnerability sounds
like a buffer overflow, although
it is described as a buffer overrun. And the differences between
overflow and overrun are very well defined, but
it seems that someone is forgetting it.

I might be wrong, but what I understood from the technical description
is that the problem regards to
an overflow. Anyone have any idea on that, or knows the reason why it
is described like that?



Alberto Cozer
Future Technologies Digital Security
IBM Certified AIX System Specialist
acozer () fti com br
http://www.fti.com.br



*********************************************************
Future Technologies Seguranca Digital

Esta mensagem e de responsabilidade de seu autor.
Seu conteudo nao reflete necessariamente a opiniao da
empresa.
*********************************************************