Detailedseverity: MediumDraft
CAPEC-181Flash File Overlay
Abstraction
Detailed
Status
Draft
Severity
Medium
Description
An attacker creates a transparent overlay using flash in order to intercept user actions for the purpose of performing a clickjacking attack. In this technique, the Flash file provides a transparent overlay over HTML content. Because the Flash application is on top of the content, user actions, such as clicks, are caught by the Flash application rather than the underlying HTML. The action is then interpreted by the overlay to perform the actions the attacker wishes.
Related weaknesses· 1
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Improper Restriction of Rendered UI Layers or Framescwe-1021 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.