CAPEC 浏览 - 天禄 CVE 数据库

CAPEC 详情

名称

Malicious Software Download

攻击可能性	典型严重性
High	Very High

摘要

An attacker uses deceptive methods to cause a user or an automated process to download and install dangerous code that originates from an attacker controlled source. There are several variations to this strategy of attack.

前置条件

解决方案

关联弱点

CWE 编号	描述
CWE-494	Download of Code Without Integrity Check

关联 CAPEC

CAPEC 编号	描述
CAPEC-184	An attacker initiates a series of events designed to cause a user, program, server, or device to perform actions which undermine the integrity of software code, device data structures, or device firmware, achieving the modification of the target's integrity to achieve an insecure state.
CAPEC-662	An adversary exploits security vulnerabilities or inherent functionalities of a web browser, in order to manipulate traffic between two endpoints.