View Attack Vector

General Information

Windows DATA Alternate Data Stream

Variants:
Direct Persistent Session

Also Known As:
ADS

Vector Type:

Relevance:
Generic

Layer:
Application-Level

Platforms:
Any

Target Type:
Application

Affected Mechanisms:
Input Validation

Invented In:
08/07/1998

Added In:
08/12/2014

Vector Operation Method:
Malicious inputs containing alternate stream characters can cause unexpected behaviors

Direct Variant:

Windows DATA ADS

Variant Title:
Windows DATA ADS

Typical Severity:
Major

Resources:

CWE

White Papers:

Learn More:

Persistent Variant:

Stored Windows DATA ADS

Also Known As:
Persistent Windows DATA ADS

Typical Severity:
Major

Resources:

White Papers:

Learn More:

Session Variant:

Windows DATA ADS via Session Puzzling

Also Known As:
Session Windows DATA ADS

Typical Severity:
Major

Resources:

White Papers:

Learn More: