A vulnerability that a threat actor can exploit to run malicious code with the same privilege level as the vulnerable process is called?

A vulnerability that a threat actor can exploit to run malicious code with the same privilege level as the vulnerable process is called?

• A. Memory injection
• B. Buffer overflow
• C. SQL injection
• D. Drive-by download

Answer: (A)

Memory injection is the act of inserting and executing attacker-supplied code within the memory space of a legitimate, running process. When that payload runs inside the process, it inherits the process’s privileges, so the attacker gains code execution at the same privilege level as the vulnerable program rather than higher privileges. This explains why the vulnerability is described as allowing code to run with the process’s own rights. A common way this happens is through memory corruption flaws, such as certain buffer overflow scenarios, which allow the attacker to overwrite control data and redirect execution to their injected code inside the process. The other options describe different attack patterns—SQL injection targets databases, drive-by downloads involve automatic malware installation via a web page, and buffer overflow is a broader memory corruption mechanism and not the specific outcome of running code inside the vulnerable process’s memory.

Memory injection is the act of inserting and executing attacker-supplied code within the memory space of a legitimate, running process. When that payload runs inside the process, it inherits the process’s privileges, so the attacker gains code execution at the same privilege level as the vulnerable program rather than higher privileges. This explains why the vulnerability is described as allowing code to run with the process’s own rights.

A common way this happens is through memory corruption flaws, such as certain buffer overflow scenarios, which allow the attacker to overwrite control data and redirect execution to their injected code inside the process. The other options describe different attack patterns—SQL injection targets databases, drive-by downloads involve automatic malware installation via a web page, and buffer overflow is a broader memory corruption mechanism and not the specific outcome of running code inside the vulnerable process’s memory.