前提条件
The target must accept user data for processing and the manner in which this data is processed must depend on some aspect of the format or flags that the attacker can control.
所需资源
None: No specialized resources are required to execute this type of attack.
相关弱点
| CWE-ID |
弱点名称 |
|
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly. |
提交记录
| 名称 |
组织 |
日期 |
发布日期 |
| CAPEC Content Team |
The MITRE Corporation |
2014-06-23 +00:00 |
|
修改记录
| 名称 |
组织 |
日期 |
备注 |
| CAPEC Content Team |
The MITRE Corporation |
2017-01-09 +00:00 |
Updated Related_Attack_Patterns |
| CAPEC Content Team |
The MITRE Corporation |
2017-08-04 +00:00 |
Updated Resources_Required |
| CAPEC Content Team |
The MITRE Corporation |
2019-04-04 +00:00 |
Updated Related_Weaknesses |
| CAPEC Content Team |
The MITRE Corporation |
2022-02-22 +00:00 |
Updated Description, Extended_Description |
