Which exploitation vector targets third-party applications such as Adobe Reader and Flash?

Which exploitation vector targets third-party applications such as Adobe Reader and Flash?

• A. RemoteExec
• B. WinRM
• C. Third-Party Applications-Based Exploitation
• D. PC/BIOS Embedded

Answer: (C)

Exploitation vectors describe where an attacker concentrates their attack to compromise a system. When the target is third-party applications such as Adobe Reader or Flash, the attacker is leveraging flaws in external software that users install and run, rather than flaws in the operating system or hardware. These apps often process complex content and have historically contained memory corruption or parsing bugs that let an attacker execute code on a victim’s machine when a malicious file or web content is opened. That makes Third-Party Applications-Based Exploitation the best match for this scenario: the vulnerability lies in widely used external applications, not in built-in system components. In contrast, remote execution-oriented vectors focus on executing commands from a distance without tying the exploit to a specific third-party app; the Windows remote management protocol (WinRM) is a legitimate tooling channel that can be abused but isn’t about targeting third-party apps; and PC/BIOS Embedded refers to firmware-level compromises.

Exploitation vectors describe where an attacker concentrates their attack to compromise a system. When the target is third-party applications such as Adobe Reader or Flash, the attacker is leveraging flaws in external software that users install and run, rather than flaws in the operating system or hardware. These apps often process complex content and have historically contained memory corruption or parsing bugs that let an attacker execute code on a victim’s machine when a malicious file or web content is opened. That makes Third-Party Applications-Based Exploitation the best match for this scenario: the vulnerability lies in widely used external applications, not in built-in system components.

In contrast, remote execution-oriented vectors focus on executing commands from a distance without tying the exploit to a specific third-party app; the Windows remote management protocol (WinRM) is a legitimate tooling channel that can be abused but isn’t about targeting third-party apps; and PC/BIOS Embedded refers to firmware-level compromises.