CAPEC-14: Client-side Injection-induced Buffer Overflow

This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service. This hostile service is created to deliver the correct content to the client software. For example, if the client-side application is a browser, the service will host a webpage that the browser loads.

Severity
High
Likelihood
Medium
15
/ 100
low-risk
Active Threat 12/50 · Low
Exploit Availability 3/50 · Minimal