CERT C++ Secure Coding Section 10 - Environment (ENV)

Opis

Weaknesses in this category are related to rules in the Environment (ENV) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.

Wpisy w tej grupie

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
• CWE-426 Untrusted Search Path
• CWE-462 Duplicate Key in Associative List (Alist)
• CWE-705 Incorrect Control Flow Scoping
• CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
• CWE-807 Reliance on Untrusted Inputs in a Security Decision
• CWE-88 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Źródła