In a attack the attacker exploits a stack buffer vulnerability to inject malicious code into the stack and overwrite the return address of the current routine so that when it terminates $,$ execution is passed to the attacker's malicious code instead of the calling routine