CAPEC-129: Pointer Manipulation

Meta Draft 严重程度: Medium

CAPEC版本: 3.9

更新日期: 2023-01-24

攻击模式描述

This attack pattern involves an adversary manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.

前提条件

  • The target application must have a pointer variable that the attacker can influence to hold an arbitrary value.

所需资源

  • None: No specialized resources are required to execute this type of attack.
关键信息

CAPEC ID: CAPEC-129

抽象级别: Meta

状态: Draft

典型严重程度: Medium