Which of the following attacks can a hacker use to execute code on a user's computer when the user visits a specially prepared, malicious website?

Denial of Service (DoS) attacks aim to make a service unavailable to its intended users by overwhelming it with a flood of illegitimate requests. While DoS can disrupt access to a website, it does not directly execute code on a user's computer. Instead, it targets the server or service itself rather than the client side.

Spoofing involves impersonating another device or user to gain unauthorized access to information or systems. While it can deceive users into providing sensitive information, it does not inherently execute code on the user's machine when they visit a website. Spoofing focuses more on identity theft than on executing malicious scripts.

SQL injection is a code injection technique that targets databases by inserting malicious SQL statements into an entry field for execution. While it can lead to unauthorized access or manipulation of database data, it does not execute code on the user's computer when they visit a website. SQL injection primarily affects the server-side database rather than the client's browser.