Katalog CWE

CWE-477 · Słabość

Use of Obsolete Function

Abstrakcja
Bazowa
Status
Szkic
Dodano
19 lipca 2006
Ostatnia zmiana
11 grudnia 2025

Podatności CVE z tą słabościąPełny wpis na cwe.mitre.org ↗

Opis

The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.

As programming languages evolve, functions occasionally become obsolete due to:

- Advances in the language

- Improved understanding of how operations should be performed effectively and securely

- Changes in the conventions that govern certain operations

Functions that are removed are usually replaced by newer counterparts that perform the same task in some different and hopefully improved way.

Skutki

  • Other

    Quality Degradation

Zapobieganie

  • Implementation

    Refer to the documentation for the obsolete function in order to determine why it is deprecated or obsolete and to learn about alternative ways to achieve the same functionality.

  • Requirements

    Consider seriously the security implications of using an obsolete function. Consider using alternate functions.

Słabość nadrzędna

Kiedy powstaje

Dotyczy

Not Language-Specific

Źródła

  1. Seven Pernicious Kingdoms: A Taxonomy of Software Security Errors — Katrina Tsipenyuk, Brian Chess, Gary McGraw, NIST, 2005
  2. State-of-the-Art Resources (SOAR) for Software Vulnerability Detection, Test, and Evaluation — Gregory Larsen, E. Kenneth Hong Fong, David A. Wheeler, Rama S. Moorthy, 2014

Wpis z katalogu CWE 4.20.