CAPEC-14 Client-side Injection-induced Buffer Overflow
abstraction: detailedstatus: activeThis type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service. This hostile service is created to deliver the correct content to the client software. For example, if the client-side application is a browser, the service will host a webpage that the browser loads.
likelihood: Mediumseverity: High
01
weaknesses (8)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.