This is a short summary of buffer-overrun attacks:

http://www.rsasecurity.com/rsalabs/technotes/buffer/buffer_overflow.html

It’s not especially technical, but it does use some simple examples written in C.