CAPEC Definitions

    CAPEC Definitions / CAPEC-234

    CAPEC-234: Hijacking a privileged process

    An adversary gains control of a process that is assigned elevated privileges in order to execute arbitrary code with those privileges. Some processes are assigned elevated privileges on an operating system, usually through association with a particular user, group, or role. If an attacker can hijack this process, they will be able to assume its level of privilege in order to execute their own code.

    Severity:Medium
    Possibility:

    Extended Description

    No Extended Description.

    Mitigations

    No Mitigations found.

    Relationships with other CAPECs

    CAPEC-233: Privilege Escalation

    CAPEC-242: Code Injection

    CAPEC-175: Code Inclusion

    CAPEC-100: Overflow Buffers

    Prerequisites

    The targeted process or operating system must contain a bug that allows attackers to hijack the targeted process.

    Related Weaknesses

    CWE-732: Incorrect Permission Assignment for Critical Resource

    CWE-648: Incorrect Use of Privileged APIs