Standard attack pattern
Draft
CAPEC-100: Overflow Buffers
Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an adversary. As a consequence, an adversary is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the adversaries' choice.
Very High
Typical severity
Per MITRE
High
Likelihood of attack
Per MITRE
6
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-100 (Overflow Buffers) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.