What is a buffer overflow, and how is it used to exploit programs?