CWE
CWE/SANS Top 25 Most Dangerous Software Errors Common Weakness Scoring System
Common Weakness Risk Analysis Framework
Home > CWE List > CWE- Individual Dictionary Definition (2.4)  

CWE-865: 2011 Top 25 - Risky Resource Management

 
2011 Top 25 - Risky Resource Management
Category ID: 865 (Category)Status: Incomplete
+ Description

Description Summary

Weaknesses in this category are listed in the "Risky Resource Management" section of the 2011 CWE/SANS Top 25 Most Dangerous Software Errors.
+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ParentOfWeakness ClassWeakness Class22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
ParentOfWeakness BaseWeakness Base120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
ParentOfWeakness BaseWeakness Base131Incorrect Calculation of Buffer Size
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
ParentOfWeakness BaseWeakness Base134Uncontrolled Format String
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
ParentOfWeakness BaseWeakness Base190Integer Overflow or Wraparound
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
ParentOfWeakness BaseWeakness Base494Download of Code Without Integrity Check
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
ParentOfWeakness BaseWeakness Base676Use of Potentially Dangerous Function
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
MemberOfViewView900Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors
Weaknesses in the 2011 CWE/SANS Top 25 Most Dangerous Software Errors (primary)900
+ References
"2011 CWE/SANS Top 25 Most Dangerous Software Errors". 2011-06-27. <http://cwe.mitre.org/top25>.
+ Content History
Submissions
Submission DateSubmitterOrganizationSource
2011-06-25Internal CWE Team
Back to top
Page Last Updated: February 20, 2013
 

CWE is co-sponsored by the office of Cybersecurity and Communications at the U.S. Department of Homeland Security.

This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2013, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us