nerdexam
CompTIA

SY0-301 · Question #116

While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the…

The correct answer is B. Buffer overflow. An application crash caused by opening a malicious attachment is a classic indicator of a buffer overflow attack, where crafted input overwrites memory and causes unexpected program termination.

Threats, vulnerabilities, and mitigations

Question

While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the following attacks?

Options

  • ACross-site scripting
  • BBuffer overflow
  • CHeader manipulation
  • DDirectory traversal

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    88% (15)
  • D
    6% (1)

Why each option

An application crash caused by opening a malicious attachment is a classic indicator of a buffer overflow attack, where crafted input overwrites memory and causes unexpected program termination.

ACross-site scripting

Cross-site scripting injects malicious scripts into web pages viewed by other users and operates in a browser context, not through a local application opening a file attachment.

BBuffer overflowCorrect

A buffer overflow occurs when more data is written to a memory buffer than it can hold, overwriting adjacent memory regions and causing the application to crash or execute arbitrary code. Attackers embed malicious payloads in files or attachments specifically designed to exceed buffer limits and trigger this condition. The 'unexpected issue - must shut down' error message is a typical symptom of a process encountering a memory access violation caused by an overflow.

CHeader manipulation

Header manipulation involves modifying HTTP request or response headers and is a web application attack vector, not one triggered by opening a local file.

DDirectory traversal

Directory traversal exploits improper path validation to access files outside the intended directory and does not cause application crashes from malformed attachment content.

Concept tested: Buffer overflow attack via malicious file attachment

Source: https://owasp.org/www-community/attacks/Buffer_overflow_attack

Topics

#buffer overflow#application crash#exploit#software vulnerability

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice