Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a net…
Acceptance of extraneous untrusted data with trusted data in UrlMon allows an unauthorized attacker to bypass a security feature over a network.
The product, when processing trusted data, accepts any untrusted data that is also included with the trusted data, treating the untrusted data as if it were trusted.
https://cwe.mitre.org/data/definitions/349.html →Open in CWE collection →Generally these are manually edited files that are not in the preview of the system administrators, any ability on the attackers' behalf to modify these files, for example in a CVS repository, gives unauthorized access directly to the application, the same as authorized users.
https://capec.mitre.org/data/definitions/75.html →Open in CAPEC collection →An attacker exploits the functionality of cache technologies to cause specific data to be cached that aids the attackers' objectives. This describes any attack whereby an attacker places incorrect or harmful material in cache. The targeted cache can be an application's cache (e.g. a web browser cache) or a public cache (e.g. a DNS or ARP cache). Until the cache is refreshed, most applications or clients will treat the corrupted cache value as valid. This can lead to a wide range of exploits including redirecting web browsers towards sites that install malware and repeatedly incorrect calculations based on the incorrect value.
https://capec.mitre.org/data/definitions/141.html →Open in CAPEC collection →A domain name server translates a domain name (such as www.example.com) into an IP address that Internet hosts use to contact Internet resources. An adversary modifies a public DNS cache to cause certain names to resolve to incorrect addresses that the adversary specifies. The result is that client applications that rely upon the targeted cache for domain name resolution will be directed not to the actual address of the specified domain name but to some other address. Adversaries can use this to herd clients to sites that install malware on the victim's computer or to masquerade as part of a Pharming attack.
https://capec.mitre.org/data/definitions/142.html →Open in CAPEC collection →| Product | Vendor | Status |
|---|---|---|
| windows_10_1507 | * | Tracked |
| windows_10_1607 | * | Tracked |
| windows_10_1809 | * | Tracked |
| windows_10_21h2 | * | Tracked |
| windows_10_22h2 | * | Tracked |
| windows_11_22h2 | * | Tracked |
| windows_11_23h2 | * | Tracked |
| windows_11_24h2 | * | Tracked |
| windows_server_2016 | * | Tracked |
| windows_server_2019 | * | Tracked |
| windows_server_2022 | * | Tracked |
| windows_server_2022_23h2 | * | Tracked |
| windows_server_2025 | * | Tracked |
| Windows | Microsoft | Tracked |
| Windows | Microsoft | Tracked |
| Windows | Microsoft | Tracked |
| Windows | Microsoft | Tracked |
| Windows | Microsoft | Tracked |
| Windows | Microsoft | Tracked |
| Windows | Microsoft | Tracked |