XenDesktop 7.X: Disabling Citrix API Hooks Fails To Take Effect When A Lot Of Executables Are Added To “ExcludedImageNames” Registry.

STATUS_BUFFER_OVERFLOW : {Buffer Overflow} The data was too large to fit into the specified buffer.

https://superuser.com/questions/491597/process-monitor-entrys-with-buffer-overflow

What is happening is the program is requesting data the length of which it does not know. It provides an initial buffer. If it is too small, a Buffer Overflow is returned together with the size needed and the program can reissue the request with the correct size.

https://blogs.technet.microsoft.com/markrussinovich/2005/06/04/buffer-overflows-in-regmon-traces/

Buffer overflow error in this context is not a security hole, but a way for the system to tell an application that there’s more data available in response to a query the application has made than can fit in the application’s output buffer. STATUS_BUFFER_OVERFLOW is used when some, but not all, available data has been copied.

Related: