Get the Whitepaper called Understanding the heap by breaking it. A case study of the heap as a persistent data structure through non-traditional exploitation techniques.
You can download it from the following link: https://packetstormsecurity.com/files/download/101177/understanding-theheap.pdf
Source: https://packetstormsecurity.com/files/101177/Understanding-The-Heap-By-Breaking-It.html