CAPEC Definitions
CAPEC Definitions / CAPEC-649
CAPEC-649: Adding a Space to a File Extension
An adversary adds a space character to the end of a file extension and takes advantage of an application that does not properly neutralize trailing special elements in file names. This extra space, which can be difficult for a user to notice, affects which default application is used to operate on the file and can be leveraged by the adversary to control execution.
Severity:Medium
Possibility:Low
Extended Description
No Extended Description.
Mitigations
File extensions should be checked to see if non-visible characters are being included.
Relationships with other CAPECs
CAPEC-635: Alternative Execution Due to Deceptive Filenames
Prerequisites
The use of the file must be controlled by the file extension.
Related Weaknesses
CWE-46: Path Equivalence: 'filename ' (Trailing Space)
