what is os command injection? a buffer overflow vulnerability is taken advantage of by an attacker to force the program to call the system library function and execute an os command.