CAPEC 详情
名称 Pointer Manipulation
攻击可能性 典型严重性
High Medium
摘要 This attack pattern involves an adversary manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.
前置条件 The target application must have a pointer variable that the attacker can influence to hold an arbitrary value.
解决方案
关联弱点
CWE 编号 描述
CWE-682 Incorrect Calculation
CWE-822 Untrusted Pointer Dereference
CWE-823 Use of Out-of-range Pointer Offset