1860
Related Attack Patterns
CAPEC-ID Attack Pattern Name
632 Homograph Attack via Homoglyphs
References
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
[REF-8]Gregory Baatard and Peter Hannay. "The 2011 IDN Homograph Attack
Mitigation Survey". 2012. ECU Publications. < http://ro.ecu.edu.au/cgi/viewcontent.cgi?
article=1174&context=ecuworks2012 >.
CWE-1021: Improper Restriction of Rendered UI Layers or Frames
Weakness ID : 1021
Structure : Simple
Abstraction : Base
Description
The web application does not restrict or incorrectly restricts frame objects or UI layers that belong
to another application or domain, which can lead to user confusion about which interface the user is
interacting with.
Extended Description
A web application is expected to place restrictions on whether it is allowed to be rendered within
frames, iframes, objects, embed or applet elements. Without the restrictions, users can be tricked
into interacting with the application when they were not intending to.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 451 User Interface (UI) Misrepresentation of Critical Information 1079
ChildOf 441 Unintended Proxy or Intermediary ('Confused Deputy') 1064
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ChildOf 610 Externally Controlled Reference to a Resource in Another
Sphere