CAPEC-649 Adding a Space to a File Extension

abstraction: detailedstatus: active

An adversary adds a space character to the end of a file extension and takes advantage of an application that does not properly neutralize trailing special elements in file names. This extra space, which can be difficult for a user to notice, affects which default application is used to operate on the file and can be leveraged by the adversary to control execution.

likelihood: Lowseverity: Medium
01

weaknesses (1)

The CWE weakness classes this flaw belongs to.

02

ATT&CK techniques

ATT&CK techniques this enables or maps to.

03

related attack patterns (1)

Related entries.

04

source

Where this definition is published.