Category-865: 2011 Top 25 - Risky Resource Management

ID: 865 Status: Obsolete

Summary

Weaknesses in this category are listed in the "Risky Resource Management" section of the 2011 CWE/SANS Top 25 Most Dangerous Software Errors.

Membership

ID NAME
CWE-120 未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
CWE-131 缓冲区大小计算不正确
CWE-134 使用外部控制的格式字符串
CWE-190 整数溢出或超界折返
CWE-22 对路径名的限制不恰当(路径遍历)
CWE-494 下载代码缺少完整性检查
CWE-676 潜在危险函数的使用

References

REF-843 2011 CWE/SANS Top 25 Most Dangerous Software Errors