A
A
Andrew10000002012-04-05 19:18:23
.NET
Andrew1000000, 2012-04-05 19:18:23

Potential vulnerabilities in binary protocols

There are many articles about vulnerabilities in the Web, but I would like to discuss how much safer it is to use binary protocols. For example, I am developing a client-server application on the .Net Framework that uses its own binary protocol to communicate over the network. That is, it writes and reads data from sockets to an array and then processes it. Remoting is not used. Interested in how realistic it is to find a vulnerability:
1) In the actual implementation of the application (of course, I don’t “paste” variables into SQL queries, I pass them through parameters). I understand that buffer overflow attacks are no longer relevant?
2) In .Net Framework 4.0
3) In Windows 7, Windows 2008 R2

Answer the question

In order to leave comments, you need to log in

1 answer(s)
E
egorinsk, 2012-04-05
@egorinsk

Buffer overflow is irrelevant, since data types and sizes are checked in the NET environment, but if you deserialize data from the network ... options are already possible here.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question