CAPEC-129
Pointer Manipulation
2014-06-23
00h00 +00:00
00h00 +00:00
특정 CAPEC 알림
특정 CAPEC의 변경 사항에 대한 정보를 받아보세요.
CAPEC 설명
This attack pattern involves an adversary manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.
CAPEC 정보
사전 조건
The target application must have a pointer variable that the attacker can influence to hold an arbitrary value.필요 리소스
None: No specialized resources are required to execute this type of attack.관련 약점
| 약점 이름 | |
|---|---|
CWE-682 |
Incorrect Calculation The product performs a calculation that generates incorrect or unintended results that are later used in security-critical decisions or resource management. |
CWE-822 |
Untrusted Pointer Dereference The product obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer. |
CWE-823 |
Use of Out-of-range Pointer Offset The product performs pointer arithmetic on a valid pointer, but it uses an offset that can point outside of the intended range of valid memory locations for the resulting pointer. |
제출
| 이름 | 조직 | 날짜 | 출시일 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation |
수정 사항
| 이름 | 조직 | 날짜 | 댓글 |
|---|---|---|---|
| CAPEC Content Team | The MITRE Corporation | Updated Description Summary, Related_Attack_Patterns | |
| CAPEC Content Team | The MITRE Corporation | Updated Resources_Required | |
| CAPEC Content Team | The MITRE Corporation | Updated Related_Weaknesses |
