...
| Tool | Version | Checker | Description | ||||||
|---|---|---|---|---|---|---|---|---|---|
| The Checker Framework |
| Tainting Checker | Trust and security errors (see Chapter 8) | ||||||
| SonarQube |
|
Related Guidelines
CWE-409, Improper Handling of Highly Compressed Data (Data Amplification) | |
Guideline 1-1 / DOS-1: Beware of activities that may use disproportionate resources |
Related Vulnerabilities
| Vulnerability | Description |
|---|---|
| Zip Slip | Zip Slip is a form of directory traversal that can be exploited by extracting files from an archive. It is caused by a failure to validate path names of the files within an archive which can lead to files being extracted outside of the intended directory and overwriting existing system files. An attacker can exploit this vulnerability to overwrite executable files to achieve remote command execution on a victim’s machine. Snyk responsibly disclosed the vulnerability before public disclosure on June 5th 2018. Their blog post and technical paper detailing the vulnerability can be found at https://snyk.io/blog/zip-slip-vulnerability/. |
Android Implementation Details
...