CAPEC-480: Escaping Virtualization
An adversary gains access to an application, service, or device with the privileges of an authorized or privileged user by escaping the confines of a virtualized environment. The adversary is then able to access resources or execute unauthorized code within the host environment, generally with the privileges of the user running the virtualized process. Successfully executing an attack of this type is often the first step in executing more complex attacks.
Comment
Our Achilles heel...
Very High
Severity
3
occurrences in scenarios
Frequency
2
Affected Components
2
Affected Scenarios
Requirements and Mitigations
Requirements
Component properties that must be true for this threat to apply:
Mitigations
Component properties that mitigate this threat:
Affected Components
| Component | Description | Boundary |
|---|---|---|
| doc_to_pixels.py | Reads a suspicious documents and converts it to pixels | gVisor sandbox |
| LibreOffice | Converts documents to PDFs | gVisor sandbox |