How security flaws work: Buffer overflows
arstechnica.co.uk