CWE-680: Integer Overflow to Buffer Overflow Integer Overflow to Buffer Overflow
Compound Element ID: 680 (Compound Element Base: Chain) Status: Draft
Description
Description Summary
The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Common Consequences
Scope Effect Integrity
Availability
Confidentiality
Technical Impact: Modify memory; DoS: crash / exit /
restart; Execute unauthorized code or
commands
Relationships
Nature Type ID Name View(s) this relationship pertains to Named Chain(s) this relationship pertains
to StartsWith Weakness Base 190 Integer Overflow or Wraparound Named Chains 709
Integer Overflow to Buffer Overflow 680
ChildOf Weakness Class 20 Improper Input Validation Research Concepts (primary) 1000
Relevant Properties
Content History
Modifications Modification Date Modifier Organization Source 2008-07-01 Eric Dalci Cigital External updated Time_of_Introduction 2008-09-08 CWE Content Team MITRE Internal updated Relationships 2009-03-10 CWE Content Team MITRE Internal updated Related_Attack_Patterns 2011-06-01 CWE Content Team MITRE Internal updated Common_Consequences
Description
