Extra data that overflows a buffer will will be written into the
nearby memory space, and will often crash the application. Under some
circumstances, an attacker will be able to sneak their own code into the
overflowed data, and have this "shellcode" executed within the vulnerable
application.