Overwriting memory Not checking the max string size Basis for classic buffer overflow attacks –1988 Internet worm –Modern attacks on Web servers char s[8]; int i; gets(s); /* reads 123456789 from stdin */
{}