...
Related Guidelines
| CERT C Coding Standard | ENV04ENV33-C. Do not call system() if you do not need a command processor |
|---|---|
| CERT C++ Secure Coding Standard | ENV04ENV02-CPP. Do not call system() if you do not need a command processor |
| CERT Oracle Secure Coding Standard for Java | IDS07-J. Do not pass Sanitize untrusted , unsanitized data passed to the Runtime.exec() method |
Bibliography
...