CAPEC-476 Signature Spoofing by Misrepresentation
abstraction: detailedstatus: activeAn attacker exploits a weakness in the parsing or display code of the recipient software to generate a data blob containing a supposedly valid signature, but the signer's identity is falsely represented, which can lead to the attacker manipulating the recipient software or its victim user to perform compromising actions.
likelihood: Lowseverity: High
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (1)
Related entries.
03
source
Where this definition is published.