CAPEC-14 Client-side Injection-induced Buffer Overflow

Abstraktion: detailedStatus: active

This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service. This hostile service is created to deliver the correct content to the client software. For example, if the client-side application is a browser, the service will host a webpage that the browser loads.

Wahrscheinlichkeit: MediumSchweregrad: High
01

Schwächen (8)

Die CWE-Schwächeklassen, zu denen dies gehört.

02

verwandte Angriffsmuster (1)

Verwandte Einträge.

03

Quelle

Wo diese Definition veröffentlicht ist.