CAPEC-14 Client-side Injection-induced Buffer Overflow

abstraction: detailedstatus: active

This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service. This hostile service is created to deliver the correct content to the client software. For example, if the client-side application is a browser, the service will host a webpage that the browser loads.

likelihood: Mediumseverity: High
01

weaknesses (8)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (1)

Related entries.

03

source

Where this definition is published.