Arbitrary code

Arbitrary code in computer programming is Code (computer programming) introduced externally that the original programmer did not intend be possible to execute. The Code injection into a currently-running application or its memory space, thus making the application execute the code.

The term is most often seen in the phrase arbitrary code execution when describing types of security vulnerability found in software.

This type of injection normally occurs thanks to buffer overflows, and can be caused by attacks such as stack overflows, heap overflows and integer overflows. Format string attacks will also suffice.