CAPECattack pattern

CAPEC-129 Pointer Manipulation

Medium Official page ↗
Abstraction
Meta
Status
Draft
Typical severity
Medium
CAPEC version
3.9

Description

This attack pattern involves an adversary manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.

Prerequisites

• The target application must have a pointer variable that the attacker can influence to hold an arbitrary value.

Related

Weakness · CWE (3)

  • CWE-682 Incorrect Calculation weakness
  • CWE-822 Untrusted Pointer Dereference weakness
  • CWE-823 Use of Out-of-range Pointer Offset weakness

Referenced by CWE · attack pattern (3)

  • CWE-682 Incorrect Calculation weakness
  • CWE-822 Untrusted Pointer Dereference weakness
  • CWE-823 Use of Out-of-range Pointer Offset weakness