2010 Top 25 - Risky Resource Management

Opis

Weaknesses in this category are listed in the "Risky Resource Management" section of the 2010 CWE/SANS Top 25 Programming Errors.

Wpisy w tej grupie

• CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CWE-129 Improper Validation of Array Index
• CWE-131 Incorrect Calculation of Buffer Size
• CWE-190 Integer Overflow or Wraparound
• CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CWE-494 Download of Code Without Integrity Check
• CWE-754 Improper Check for Unusual or Exceptional Conditions
• CWE-770 Allocation of Resources Without Limits or Throttling
• CWE-805 Buffer Access with Incorrect Length Value
• CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Źródła