CAPEC Definitions

    CAPEC Definitions / CAPEC-129

    CAPEC-129: Pointer Manipulation

    This attack pattern involves an adversary manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.

    Severity:Medium
    Possibility:

    Extended Description

    No Extended Description.

    Mitigations

    No Mitigations found.

    Relationships with other CAPECs

    No related CAPECs found.

    Prerequisites

    The target application must have a pointer variable that the attacker can influence to hold an arbitrary value.

    Related Weaknesses

    CWE-682: Incorrect Calculation

    CWE-822: Untrusted Pointer Dereference

    CWE-823: Use of Out-of-range Pointer Offset