Which of the following is true of improper error handling?

• A. Attackers can use error messages to extract specific information from a system.
• B. Attackers can use unexpected errors to knock an application off line, creating a denial-of- service attack.
• C. Unexpected errors can provide an attacker with a buffer or stack overflow condition that sets the stage for an arbitrary code execution.
• D. All of the above.