Detailedseverity: MediumDraft
CAPEC-263Force Use of Corrupted Files
Abstraction
Detailed
Status
Draft
Severity
Medium
Description
This describes an attack where an application is forced to use a file that an attacker has corrupted. The result is often a denial of service caused by the application being unable to process the corrupted file, but other results, including the disabling of filters or access controls (if the application fails in an unsafe way rather than failing by locking down) or buffer overflows are possible.
Related weaknesses· 1
Related attack patterns· 1
Exploits1
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Inclusion of Functionality from Untrusted Control Spherecwe-829 | 100% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.