Divide By Zero

Opis

The product divides a value by zero.

This weakness typically occurs when an unexpected value is provided to the product, or if an error occurs that is not properly detected. It frequently occurs in calculations involving physical dimensions such as size, length, width, and height.

Skutki

• Availability

  DoS: Crash, Exit, or Restart

  A Divide by Zero results in a crash.

Przykłady podatności

• CVE-2007-3268 Invalid size value leads to divide by zero.
• CVE-2007-2723 "Empty" content triggers divide by zero.
• CVE-2007-2237 Height value of 0 triggers divide by zero.

Słabość nadrzędna

• CWE-682 Incorrect Calculation

Kiedy powstaje

• Implementation

Dotyczy

Not Language-Specific

Źródła

1. Handling Errors Exceptionally Well in C++ — Alex Allain
2. Exceptions and Exception Handling (C# Programming Guide) — Microsoft