CAPEC™ 23: File Content Injection
Description
An adversary poisons files with a malicious payload (targeting the file systems accessible by the target software), which may be passed through by standard channels such as via email, and standard web content like PDF and multimedia files. The adversary exploits known vulnerabilities or handling routines in the target processes, in order to exploit the host's trust in executing remote content, including binary files.
Source: CAPEC™ 23
Related ASVS Requirements
ASVS (5.0): 1.3.4, 1.3.5, 1.3.6, 1.3.7, 1.5.1, 1.5.3, 16.3.3, 16.3.4, 16.5.1, 5.1.1, 5.2.2, 5.2.3, 5.2.5, 5.3.1, 5.3.2, 5.3.3, 5.4.1, 5.4.2, 5.4.3
