represent less than 5% of vulnerabilities overall. This probably
reflects growing interest by expert researchers in finding integer
overflows, along with the tendency of expert researchers to
evaluate widely deployed software. The affected software