CWE-121 - Stack-based Buffer Overflow
- 摘要：Variant
- 结构：Simple
- 状态：Draft
- 发布日期：2006-07-19
- 更新日期：2026-01-21
名称
Stack-based Buffer Overflow
描述
A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
常见后果
范围：Availability
影响：Modify Memory, DoS: Crash, Exit, or Restart, DoS: Resource Consumption (CPU), DoS: Resource Consumption (Memory)
注释：Buffer overflows generally lead to crashes. Other attacks leading to lack of availability are possible, including putting the program into an infinite loop.
范围：Integrity, Confidentiality, Availability, Access Control
影响：Modify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism
注释：Buffer overflows often can be used to execute arbitrary code, which is usually outside the scope of a program's implicit security policy.
范围：Integrity, Confidentiality, Availability, Access Control, Other
影响：Modify Memory, Execute Unauthorized Code or Commands, Bypass Protection Mechanism, Other
注释：When the consequence is arbitrary code execution, this can often be used to subvert any other security service.