CAPEC-10 Buffer Overflow via Environment Variables

abstraction: detailedstatus: active

This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the adversary finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.

likelihood: Highseverity: High
01

weaknesses (10)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.