How a Buffer Overflow Attack Actually Works

When a program reserves a fixed block of memory on the stack, like a 16-byte variable for a username, functions like strcpy in C copy user input without checking its size.