CWE-695 使用底层的功能例程

Use of Low-Level Functionality

结构: Simple

Abstraction: Base

状态: Incomplete

被利用可能性: unkown

基本描述

The software uses low-level functionality that is explicitly prohibited by the framework or specification under which the software is supposed to operate.

扩展描述

The use of low-level functionality can violate the specification in unexpected ways that effectively disable built-in protection mechanisms, introduce exploitable inconsistencies, or otherwise expose the functionality to attack.

相关缺陷

• cwe_Nature: ChildOf cwe_CWE_ID: 573 cwe_View_ID: 1000 cwe_Ordinal: Primary

• cwe_Nature: ChildOf cwe_CWE_ID: 573 cwe_View_ID: 699 cwe_Ordinal: Primary

常见的影响

范围	影响	注释
Other	Other

相关攻击模式

• CAPEC-36

文章来源于互联网:scap中文网