CAPEC-129 - Pointer Attack

This attack involves an attacker manipulating a pointer within a target application resulting in the application accessing an unintended memory location. This can result in the crashing of the application or, for certain pointer values, access to data that would not normally be possible or the execution of arbitrary code. Since pointers are simply integer variables, Integer Attacks may often be used in Pointer Attacks.

Severity

Likelihood

Confidentiality

Integrity

Availability

The target application must have a pointer variable that the attacker can influence to hold an arbitrary value.

No special resources are required for most forms of this attack.