2011 Top 25 - Risky Resource Management

Opis

Weaknesses in this category are listed in the "Risky Resource Management" section of the 2011 CWE/SANS Top 25 Most Dangerous Software Errors.

Wpisy w tej grupie

• CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
• CWE-131 Incorrect Calculation of Buffer Size
• CWE-134 Use of Externally-Controlled Format String
• CWE-190 Integer Overflow or Wraparound
• CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• CWE-494 Download of Code Without Integrity Check
• CWE-676 Use of Potentially Dangerous Function

Źródła