When information system software is targeted by an attacker, the
ultimate objective is most often to bypass or exploit the privileges and
mechanisms that enable the targeted software to access information the
attacker has no authorization to access.