CWE
CWE/SANS Top 25 Most Dangerous Software Errors Common Weakness Scoring System
Common Weakness Risk Analysis Framework
Home > CWE List > CWE- Individual Dictionary Definition (2.4)  

CWE-878: CERT C++ Secure Coding Section 10 - Environment (ENV)

 
CERT C++ Secure Coding Section 10 - Environment (ENV)
Category ID: 878 (Category)Status: Incomplete
+ Description

Description Summary

Weaknesses in this category are related to rules in the Environment (ENV) section of the CERT C++ Secure Coding Standard. Since not all rules map to specific weaknesses, this category may be incomplete.
+ Relationships
NatureTypeIDNameView(s) this relationship pertains toView(s)
ParentOfWeakness BaseWeakness Base78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Weaknesses Addressed by the CERT C++ Secure Coding Standard868
ParentOfWeakness BaseWeakness Base88Argument Injection or Modification
Weaknesses Addressed by the CERT C++ Secure Coding Standard868
ParentOfWeakness ClassWeakness Class119Improper Restriction of Operations within the Bounds of a Memory Buffer
Weaknesses Addressed by the CERT C++ Secure Coding Standard868
ParentOfCompound Element: CompositeCompound Element: Composite426Untrusted Search Path
Weaknesses Addressed by the CERT C++ Secure Coding Standard (primary)868
ParentOfWeakness BaseWeakness Base462Duplicate Key in Associative List (Alist)
Weaknesses Addressed by the CERT C++ Secure Coding Standard (primary)868
ParentOfWeakness ClassWeakness Class705Incorrect Control Flow Scoping
Weaknesses Addressed by the CERT C++ Secure Coding Standard868
ParentOfWeakness BaseWeakness Base807Reliance on Untrusted Inputs in a Security Decision
Weaknesses Addressed by the CERT C++ Secure Coding Standard (primary)868
MemberOfViewView868Weaknesses Addressed by the CERT C++ Secure Coding Standard
Weaknesses Addressed by the CERT C++ Secure Coding Standard (primary)868
+ Content History
Submissions
Submission DateSubmitterOrganizationSource
2011-08-04Internal CWE Team
Back to top
Page Last Updated: February 20, 2013
 

CWE is co-sponsored by the office of Cybersecurity and Communications at the U.S. Department of Homeland Security.

This Web site is sponsored and managed by The MITRE Corporation to enable stakeholder collaboration. Copyright © 2006-2013, The MITRE Corporation. CWE, CWSS, CWRAF, and the CWE logo are trademarks of The MITRE Corporation.

Contact cwe@mitre.org for more information.
Privacy policy
Terms of use
Contact us