CAPEC Definitions

    CAPEC Definitions / CAPEC-556

    CAPEC-556: Replace File Extension Handlers

    When a file is opened, its file handler is checked to determine which program opens the file. File handlers are configuration properties of many operating systems. Applications can modify the file handler for a given file extension to call an arbitrary program when a file with the given extension is opened.

    Severity:
    Possibility:

    Extended Description

    No Extended Description.

    Mitigations

    Inspect registry for changes. Limit privileges of user accounts so changes to default file handlers can only be performed by authorized administrators.

    Relationships with other CAPECs

    CAPEC-542: Targeted Malware

    Prerequisites

    No prerequisites found.

    Related Weaknesses

    CWE-284: Improper Access Control