This attack involves an attacker manipulating a pointer within a target
application resulting in the application accessing an unintended memory
location. This can result in the crashing of the application or, for certain
pointer values, access to data that would not normally be possible or the
execution of arbitrary code. Since pointers are simply integer variables,
Integer Attacks may often be used in Pointer Attacks.
Attack Prerequisites
The target application must have a pointer variable that the attacker can
influence to hold an arbitrary value.
Resources Required
No special resources are required for most forms of this attack.
Vision and Technical Leadership provided by Cigital, Inc.
This Web site is hosted by The MITRE Corporation.
Copyright 2009, The MITRE Corporation. CAPEC and the CAPEC logo are trademarks of The MITRE Corporation.
Description
