CAPEC-23 File Content Injection

abstraction: standardstatus: active

An adversary poisons files with a malicious payload (targeting the file systems accessible by the target software), which may be passed through by standard channels such as via email, and standard web content like PDF and multimedia files. The adversary exploits known vulnerabilities or handling routines in the target processes, in order to exploit the host's trust in executing remote content, including binary files.

likelihood: Highseverity: Very High
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (2)

Related entries.

03

source

Where this definition is published.