|
|
|
|
CWE-680: Integer Overflow to Buffer Overflow
| | Integer Overflow to Buffer Overflow |
Definition in a New Window 
|
| Compound Element ID: 680 (Compound Element Base: Chain) | | Status: Draft |
 Description
Description Summary The product performs a calculation to determine how much memory to allocate, but an integer overflow can occur that causes less memory to be allocated than expected, leading to a buffer overflow.
Common Consequences | Scope | Effect |
|---|
Integrity Availability Confidentiality | Technical Impact: Modify memory; DoS: crash / exit /
restart; Execute unauthorized code or
commands |
Relationships | Nature | Type | ID | Name | View(s) this relationship pertains to | Named Chain(s) this relationship pertains
to |
|---|
| StartsWith |  Weakness Base | 190 | Integer Overflow or Wraparound | Named Chains709 | Integer Overflow to Buffer Overflow680 | | ChildOf |  Weakness Class | 20 | Improper Input Validation | Research Concepts (primary)1000 | |
Relevant Properties Content History | Modifications |
|---|
| Modification Date | Modifier | Organization | Source |
|---|
| 2008-07-01 | Eric Dalci | Cigital | External | | updated Time_of_Introduction | | 2008-09-08 | CWE Content Team | MITRE | Internal | | updated Relationships | | 2009-03-10 | CWE Content Team | MITRE | Internal | | updated Related_Attack_Patterns | | 2011-06-01 | CWE Content Team | MITRE | Internal | | updated Common_Consequences |
|
