Standard attack pattern
Draft
CAPEC-182: Flash Injection
An attacker tricks a victim to execute malicious flash content that executes commands or makes flash calls specified by the attacker. One example of this attack is cross-site flashing, an attacker controlled parameter to a reference call loads from content specified by the attacker.
Medium
Typical severity
Per MITRE
High
Likelihood of attack
Per MITRE
3
Related weaknesses
CWEs this targets
Standard
Abstraction
MITRE classification
Overview
CAPEC-182 (Flash Injection) is a standard-level attack pattern catalogued by MITRE in the Common Attack Pattern Enumeration and Classification (CAPEC). It describes a recurring method attackers use to exploit software weaknesses.