CAPEC-23 File Content Injection
abstraction: standardstatus: activeAn adversary poisons files with a malicious payload (targeting the file systems accessible by the target software), which may be passed through by standard channels such as via email, and standard web content like PDF and multimedia files. The adversary exploits known vulnerabilities or handling routines in the target processes, in order to exploit the host's trust in executing remote content, including binary files.
likelihood: Highseverity: Very High
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (2)
Related entries.
03
source
Where this definition is published.