View Attack Vector

General Information

Buffer Overflow via Malicious Input

Variants:
Direct Persistent Session

Also Known As:
Stack Overflow, Heap Overflow

Vector Type:
Attack

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any, Except managed code without external calls

Target Type:
Application

Affected Mechanisms:
Input Validation, Memory Management

Invented In:
01/01/1972

Added In:
24/12/2014

Quick Introduction to the Topic:

Vector Operation Method:
A memory corruption attack that can crash services and execute malicious code.

Direct Variant:

Buffer Overflow via Malicious Input

Also Known As:
Stack Overflow, Heap Overflow

Typical Severity:
Critical

Resources:

Wiki

CWE

White Papers:

Paper I

Learn More:

Persistent Variant:

Stored Buffer Overflow

Also Known As:
Persistent Buffer Overflow

Typical Severity:
Critical

Resources:

White Papers:

Learn More:

Session Variant:

Buffer Overflow via Session Puzzling

Variant Title:
Buffer Overflow via Session Puzzling

Typical Severity:
Critical

Resources:

White Papers:

Learn More: