Close

In Mitre's definitions and comments on vulnerabilities they have buffer overflows near the bottom of http://cwe.mitre.org/data/dictionary.html#121

Their comment is aimed at programmers. The translation is, "If you have a buffer overflow in a product, you are a FOOL!"
"Programmers should adhere to the following rules when allocating and managing their applications memory: Double check that your buffer is as large as you specify. When using functions that accept a number of bytes to copy, such as strncpy(), be aware that if the destination buffer size is equal to the source buffer size, it may not NULL-terminate the string. Check buffer boundaries if calling this function in a loop and make sure you are not in danger of writing past the allocated space. Truncate all input strings to a reasonable length before passing them to the copy and concatenation functions."