Defeating theStack Based Buffer Overflow Prevention Mechanism...is going to look at how, currently, thestack based protection built into Windows 2003...places a security cookie (or canary) on thestack in front of the saved return address when...
http://www.nextgenss.com/papers/defeating-w2k3-stack-protection.pdf