COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-635

Alternative Execution Due to Deceptive Filenames

The extension of a file name is often used in various contexts to determine the application that is used to open and use it. If an attacker can cause an alternative application to be used, it may be able to execute malicious code, cause a denial of service or expose sensitive information.

Soyutlama

Standard

Tipik ciddiyet

High

Saldırı ihtimali

Medium

Saldırıyı anla

Bu saldırı kalıbı nedir?

The extension of a file name is often used in various contexts to determine the application that is used to open and use it. If an attacker can cause an alternative application to be used, it may be able to execute malicious code, cause a denial of service or expose sensitive information.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • The use of the file must be controlled by the file extension.

Gerekli beceri

MITRE kaydında belirtilmemiş.

Gerekli kaynak

MITRE kaydında belirtilmemiş.

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Applications should insure that the content of the file is consistent with format it is expecting, and not depend solely on the file extension.
CAPEC-635: Alternative Execution Due to Deceptive Filenames — DayBreach Saldırı Sözlüğü · DayBreach