CWE
Home > CWE List > CWE-589 Individual Dictionary Definition (Draft 9)   View the CWE List

CWE-589 Individual Dictionary Definition (Draft 9)

Call to Non-ubiquitous API
Weakness ID
Status: Incomplete

589 (Weakness Variant)

Description

Summary

An API function that does not exist on all versions of the target platform was identified. Some functions that offer security features supported by the OS are not available on all versions of the OS in common use. Likewise, functions are often deprecated or made obsolete for security reasons and should not be used.

Potential Mitigations

Implementation: Always test your code on any platform on which it is targeted to run on.

Pre-design through build: Test your code on the newest and oldest platform on which it is targeted to run on.

Context Notes

Consequence: Pre-design through build: It is important to develop a system to test for this set of functions.

Relationships
NatureTypeIDName
ChildOfWeakness BaseWeakness BaseWeakness Base474Use of Function with Inconsistent Implementations
Related Attack Patterns
CAPEC-IDAttack Pattern Name
96Block Access to Libraries
Page Last Updated: April 22, 2008