CWEweakness

CWE-507 Trojan Horse

Official page ↗
Abstraction
Base
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product appears to contain benign or useful functionality, but it also contains code that is hidden from normal operation that violates the intended security policy of the user or the system administrator.

Common consequences

• Confidentiality, Integrity, Availability: Execute Unauthorized Code or Commands

Potential mitigations

• [Operation] Most antivirus software scans for Trojan Horses. • [Installation] Verify the integrity of the product that is being installed.

Related

Attack pattern · CAPEC (1)

  • CAPEC-698 Install Malicious Extension attack pattern

Child of · CWE (1)

  • CWE-506 Embedded Malicious Code weakness

Referenced by CAPEC · weakness (1)

  • CAPEC-698 Install Malicious Extension attack pattern

Referenced by CVE · weakness (1)

  • CVE-2020-26292 Creeper is an experimental dynamic, interpreted language. vulnerability

Referenced by CWE · child of (2)

  • CWE-508 Non-Replicating Malicious Code weakness
  • CWE-509 Replicating Malicious Code (Virus or Worm) weakness