Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The Windows API provides the CreateFile() function to create new, and open existing files. The CreateFile() function is specified as:

Code Block

HANDLE CreateFile(
  LPCTSTR lpFileName,
  DWORD dwDesiredAccess,
  DWORD dwShareMode,
  LPSECURITY_ATTRIBUTES lpSecurityAttributes,
  DWORD dwCreationDisposition,
  DWORD dwFlagsAndAttributes,
  HANDLE hTemplateFile
);

Risk Assessment

Creating files without appropriate access permissions may allow unintended access to those files.

...