Exploiting a buffer overflow in sprintf was a lab assignment in my computer architecture course, iirc I had to watch a few youtube videos to really understand what I needed to do (my TA wasn't particularly helpful).

Not to go all slippery slope, but are BosnianBill and the Lock Picking Lawyer next?