CAPEC-14: Client-side Injection-induced Buffer Overflow
This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service. This hostile service is created to deliver the correct content to the client software. For example, if the client-side application is a browser, the service will host a webpage that the browser loads.
Severity
High
Likelihood
Medium
15
/ 100
low-risk
Active Threat
12/50 · Low
Exploit Availability
3/50 · Minimal