write-what-where

write-what-where (not comparable)

1. (computer security) Being or relating to a security vulnerability allowing the attacker to write arbitrary data to an arbitrary location.
   • 2010, Enrico Perla, Massimiliano Oldani, A Guide to Kernel Exploitation: Attacking the Core, page 308:

     Arbitrary memory overwrite, also known as the "write-what-where" vulnerability, is the most common vulnerability affecting Windows kernel drivers. This kind of vulnerability is mainly due to failure or incorrect use of the user-land validation kernel APIs.

   • 2021, Arti Noor, Abhijit Sen, Gaurav Trivedi, Proceedings of Emerging Trends and Technologies on Intelligent Systems: ETTIS 2021, page 26:

     A write-what-where primitive allows the attacker to write arbitrary data wherever they want in the memory