General Information

Buffer Overflow via Client Extension Initialization Params

Variants:
Direct 

Also Known As:
Overflow Variables and Tags

Vector Type:
Attack

Relevance:
Generic

Layer:
Custom Browser Extension, Browser, Client Application

Platforms:
Any

Target Type:
Web Application

Affected Mechanisms:
Memory Management

Invented In:
01/01/1995

Added In:
25/12/2014


Vector Operation Method:
Buffer overflow attacks against browsers using legitimate custom DLLs, ActiveX components and browser extensions installed by the tested website.


Direct Variant:

Buffer Overflow against Custom Client Controls

Variant Title:
Buffer Overflow against Custom Client Controls

Typical Severity:
Major

Learn More: