Component: doc_to_pixels.py
Reads a suspicious documents and converts it to pixels
Potential Mitigations
Properties not currently implemented that would mitigate applicable threats:
Threats Affecting This Component
| Threat ID | Name | Description | Potential Mitigations |
|---|---|---|---|
| CAPEC-131 | Resource Leak Exposure | An adversary utilizes a resource leak on the target to deplete the quantity of the resource available to service legitimate requests. | is resource constrained |
| CAPEC-177 | Create files with the same name as files protected with a higher classification | An attacker exploits file location algorithms in an operating system or application by creating a file with the same name as a protected or privileged file. The attacker could manipulate the system if the attacker-created file is trusted by the operating system or an application component that attempts to load the original file. Applications often load or include external files, such as libraries or configuration files. These files should be protected against malicious manipulation. However, if the application only uses the name of the file when locating it, an attacker may be able to create a file with the same name and place it in a directory that the application will search before the directory with the legitimate file is searched. Because the attackers' file is discovered first, it would be used by the target application. This attack can be extremely destructive if the referenced file is executable and/or is granted special privileges based solely on having a particular name. | assume not compromised verifies resources · system |
| CAPEC-480 | Escaping Virtualization | An adversary gains access to an application, service, or device with the privileges of an authorized or privileged user by escaping the confines of a virtualized environment. The adversary is then able to access resources or execute unauthorized code within the host environment, generally with the privileges of the user running the virtualized process. Successfully executing an attack of this type is often the first step in executing more complex attacks. | |
| CAPEC-263 | Force Use of Corrupted Files | This describes an attack where an application is forced to use a file that an attacker has corrupted. The result is often a denial of service caused by the application being unable to process the corrupted file, but other results, including the disabling of filters or access controls (if the application fails in an unsafe way rather than failing by locking down) or buffer overflows are possible. | assume not compromised verifies resources · system |
| CAPEC-176 | Configuration/Environment Manipulation | An attacker manipulates files or settings external to a target application which affect the behavior of that application. For example, many applications use external configuration files and libraries - modification of these entities or otherwise affecting the application's ability to use them would constitute a configuration/environment manipulation attack. | assume not compromised verifies resources · system |