Gain privileges by modifying assumed-immutable
code addresses that are accessed by a driver.
Potential Mitigations
Phase
Description
Implement proper protection for immutable data (e.g. environment
variable, hidden form fields, etc.)
Other Notes
Factors: MAID issues can be primary to many other weaknesses, and they are
a major factor in languages such as PHP.
This happens when a particular input is critical enough to the functioning
of the application that it should not be modifiable at all, but it is. A
common programmer assumption is that certain variables are immutable;
especially consider hidden form fields in web applications. So there are
many examples where the MUTABILITY property is a major factor in a
vulnerability.
Common data types that are attacked are environment variables, web
application parameters, and HTTP headers.
Description
