CWE
Home > CWE List > CWE-691 Individual Dictionary Definition (Draft 9)   View the CWE List

CWE-691 Individual Dictionary Definition (Draft 9)

Insufficient Control Flow Management
Weakness ID
Status: Draft

691 (Weakness Class)

Description

Summary

The code does not sufficiently manage its control flow during execution, creating conditions in which the control flow can be modified in unexpected ways.

Context Notes

This is a fairly high-level concept, although it covers a number of weaknesses in CWE that were more scattered throughout the natural hierarchy before Draft 9 was released.

Relationships
NatureTypeIDName
ChildOfCategoryCategory18Source Code
ParentOfWeakness BaseWeakness BaseWeakness Base248Uncaught Exception
ParentOfWeakness ClassWeakness ClassWeakness Class362Race Condition
ParentOfWeakness VariantWeakness VariantWeakness Variant382J2EE Bad Practices: Use of System.exit()
ParentOfWeakness BaseWeakness BaseWeakness Base395Use of NullPointerException Catch to Detect NULL Pointer Dereference
ParentOfWeakness BaseWeakness BaseWeakness Base455Non-exit on Failed Initialization
ParentOfWeakness BaseWeakness BaseWeakness Base584Return Inside Finally Block
ParentOfWeakness BaseWeakness BaseWeakness Base600Failure to Catch All Exceptions (Missing Catch Block)
ParentOfWeakness VariantWeakness VariantWeakness Variant618Exposed Unsafe ActiveX Method
ParentOfWeakness VariantWeakness VariantWeakness Variant623Unsafe ActiveX Control Marked Safe For Scripting
ParentOfWeakness BaseWeakness BaseWeakness Base662Insufficient Synchronization
ParentOfWeakness ClassWeakness ClassWeakness Class94Code Injection
Applicable Platforms

All

Back to top
Page Last Updated: April 22, 2008
 

CWE is sponsored by the National Cyber Security Division of the U.S. Department of Homeland Security.

This Web site is hosted by The MITRE Corporation.
Copyright 2008, The MITRE Corporation. CWE and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us