Return-Oriented Programming Attacks

I just learned about return-oriented programming attacks.  Wikipedia's discussion of the topic is here. These attacks are advanced forms of stack smashing attacks, but they rely on existing code rather than inserting entirely new code.