CAPEC-231 Oversized Serialized Data Payloads

abstraction: standardstatus: active

An adversary injects oversized serialized data payloads into a parser during data processing to produce adverse effects upon the parser such as exhausting system resources and arbitrary code execution.

likelihood: Mediumseverity: High
01

weaknesses (4)

The CWE weakness classes this flaw belongs to.

02

related attack patterns (3)

Related entries.

03

source

Where this definition is published.