What could be a vulnerability in accepting a string as a format string for printf in C?
Anonymous
We can insert formats in the string for printing addresses, which would essentially print addresses on the stack, breaking ASLR.
Check out your Company Bowl for anonymous work chats.