CAPEC-10: Buffer Overflow via Environment Variables

This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the adversary finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.

Severity
High
Likelihood
High
15
/ 100
low-risk
Active Threat 12/50 · Low
Exploit Availability 3/50 · Minimal