US cyber defense agency urges developers to eliminate buffer overflow vulnerabilities