CAPEC-181
Flash File Overlay
2014-06-23
00h00 +00:00
00h00 +00:00
Peringatan untuk CAPEC tertentu
Tetap terinformasi tentang perubahan untuk CAPEC tertentu.
Deskripsi CAPEC
An attacker creates a transparent overlay using flash in order to intercept user actions for the purpose of performing a clickjacking attack. In this technique, the Flash file provides a transparent overlay over HTML content. Because the Flash application is on top of the content, user actions, such as clicks, are caught by the Flash application rather than the underlying HTML. The action is then interpreted by the overlay to perform the actions the attacker wishes.
Informasi CAPEC
Prasyarat
The victim must be tricked into navigating to the attackers' decoy site and performing the actions on the decoy page.The victim's browser must support invisible Flash overlays.
Sumber Daya yang Diperlukan
The attacker must be able to force the Flash overlay over the decoy content.Kelemahan Terkait
| Nama Kelemahan | |
|---|---|
CWE-1021 |
Improper Restriction of Rendered UI Layers or Frames The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain. |
Pengajuan
| Nama | Organisasi | Tanggal | Tanggal rilis |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
Modifikasi
| Nama | Organisasi | Tanggal | Komentar |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Attack_Patterns |
