1023
Reference Description
https://www.cve.org/CVERecord?id=CVE-2003-0908
CVE-2004-0213 Attacker uses Shatter attack to bypass GUI-enforced protection for
CVE-2003-0908.
https://www.cve.org/CVERecord?id=CVE-2004-0213
CVE-2004-0207 User can call certain API functions to modify certain properties of privileged
programs.
https://www.cve.org/CVERecord?id=CVE-2004-0207
Affected Resources
• System Process
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 953 SFP Secondary Cluster: Missing Endpoint
Authentication
888 2397
MemberOf 1396 Comprehensive Categorization: Access Control 1400 2519
Notes
Relationship
Overlaps privilege errors and UI errors.
Research Gap
Possibly under-reported, probably under-studied. It is suspected that a number of publicized
vulnerabilities that involve local privilege escalation on Windows systems may be related to
Shatter attacks, but they are not labeled as such. Alternate channel attacks likely exist in other
operating systems and messaging models, e.g. in privileged X Windows applications, but
examples are not readily available.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Unprotected Windows Messaging
Channel ('Shatter')
Software Fault Patterns SFP30 Missing endpoint authentication
References
[REF-402]Paget. "Exploiting design flaws in the Win32 API for privilege escalation. Or... Shatter
Attacks - How to break Windows". 2002 August. < http://web.archive.org/web/20060115174629/
http://security.tombom.co.uk/shatter.html >.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
CWE-424: Improper Protection of Alternate Path
Weakness ID : 424
Structure : Simple
Abstraction : Class
Description
CWE Version 4.14
CWE-424: Improper Protection of Alternate Path
CWE-424: Improper Protection of Alternate Path