title: Heap overflow attacks
body: <p>How are heap overflow attacks executed?</p>
  <p>In the case of stack overflow attacks, the attacker replaces the function return address with his address of choice.</p>
  <p>How is this done in the case of a heap overflow attack? Also, is it possible to run code from the heap?</p>