The software uses low-level functionality that is explicitly prohibited by the framework or specification under which the software is supposed to operate.
Extended Description
The use of low-level functionality can violate the specification in unexpected ways that effectively disable built-in protection mechanisms, introduce exploitable inconsistencies, or otherwise expose the functionality to attack.
Time of Introduction
Architecture and Design
Implementation
Common Consequences
Scope
Effect
Other
Technical Impact: Other
Potential Mitigations
Run the application with limited privileges.
Harden the OS to enforce the least privilege principle.
Description
