CWE-118 对可索引资源的访问不恰当（越界错误）

Incorrect Access of Indexable Resource ('Range Error')

结构: Simple

Abstraction: Class

状态: Incomplete

被利用可能性: unkown

基本描述

The software does not restrict or incorrectly restricts operations within the boundaries of a resource that is accessed using an index or pointer, such as memory or files.

适用平台

Language: {'cwe_Class': 'Language-Independent', 'cwe_Prevalence': 'Undetermined'}

常见的影响

范围	影响	注释
Other	Varies by Context

分类映射

映射的分类名	ImNode ID	Fit	Mapped Node Name
Software Fault Patterns	SFP8		Faulty Buffer Access

相关攻击模式

• CAPEC-10
• CAPEC-14
• CAPEC-24
• CAPEC-45
• CAPEC-46
• CAPEC-47
• CAPEC-8
• CAPEC-9

文章来源于互联网:scap中文网