前置條件
The target must accept user data for processing and the manner in which this data is processed must depend on some aspect of the format or flags that the attacker can control.
所需資源
None: No specialized resources are required to execute this type of attack.
相關弱點
| CWE-ID |
弱點名稱 |
|
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly. |
提交
| 名稱 |
機構 |
日期 |
發布日期 |
| CAPEC Content Team |
The MITRE Corporation |
2014-06-23 +00:00 |
|
修改記錄
| 名稱 |
機構 |
日期 |
備註 |
| CAPEC Content Team |
The MITRE Corporation |
2017-01-09 +00:00 |
Updated Related_Attack_Patterns |
| CAPEC Content Team |
The MITRE Corporation |
2017-08-04 +00:00 |
Updated Resources_Required |
| CAPEC Content Team |
The MITRE Corporation |
2019-04-04 +00:00 |
Updated Related_Weaknesses |
| CAPEC Content Team |
The MITRE Corporation |
2022-02-22 +00:00 |
Updated Description, Extended_Description |
