SY0-301 · Question #116
While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the…
The correct answer is B. Buffer overflow. An application crash caused by opening a malicious attachment is a classic indicator of a buffer overflow attack, where crafted input overwrites memory and causes unexpected program termination.
Question
While opening an email attachment, Pete, a customer, receives an error that the application has encountered an unexpected issue and must be shut down. This could be an example of which of the following attacks?
Options
- ACross-site scripting
- BBuffer overflow
- CHeader manipulation
- DDirectory traversal
How the community answered
(17 responses)- A6% (1)
- B88% (15)
- D6% (1)
Why each option
An application crash caused by opening a malicious attachment is a classic indicator of a buffer overflow attack, where crafted input overwrites memory and causes unexpected program termination.
Cross-site scripting injects malicious scripts into web pages viewed by other users and operates in a browser context, not through a local application opening a file attachment.
A buffer overflow occurs when more data is written to a memory buffer than it can hold, overwriting adjacent memory regions and causing the application to crash or execute arbitrary code. Attackers embed malicious payloads in files or attachments specifically designed to exceed buffer limits and trigger this condition. The 'unexpected issue - must shut down' error message is a typical symptom of a process encountering a memory access violation caused by an overflow.
Header manipulation involves modifying HTTP request or response headers and is a web application attack vector, not one triggered by opening a local file.
Directory traversal exploits improper path validation to access files outside the intended directory and does not cause application crashes from malformed attachment content.
Concept tested: Buffer overflow attack via malicious file attachment
Source: https://owasp.org/www-community/attacks/Buffer_overflow_attack
Topics
Community Discussion
No community discussion yet for this question.