Certified Information Systems Security Professional – CISSP – Question215

Although code using a specific program language may not be susceptible to a buffer overflow attack,

A.
most calls to plug-in programs are susceptible.
B. most supporting application code is susceptible.
C. the graphical images used by the application could be susceptible.
D. the supporting virtual machine could be susceptible.

Correct Answer: C