...
The dwSharedMode parameter is known as the sharing mode of a file. According to Microsoft, "An open file that is not shared cannot be opened again, either by the application that opened it or by another application, until its handle has been closed."
The lpSecurityAttributes parameter is used to specify access rights controls for the newly created file. If this parameter is NULL, the created file is assigned default access controls, which is inherited from the parent directory of the file.
Risk Assessment
Creating files without appropriate access permissions may allow unintended access to those files.
...
- ISO/IEC 9899-1999 Section 7.19.5.3, The fopen function
- Open Group 04 The open function
- ISO/IEC TR 24731-2006 Section 6.5.2.1, The fopen_s function
- CreateFile CreateFile
- Creating and Opening Files Creating and Opening Files
- CVE-2006-1174