You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 24 Next »

Software vulnerabilities can result when a programmer fails to consider all possible data states.

Unable to render {include} The included page could not be found.
Unable to render {include} The included page could not be found.
Unable to render {include} The included page could not be found.
Unable to render {include} The included page could not be found.

Risk Assessment

Failing to take into account all possibilities within a logic statement can lead to a corrupted running state, possibly resulting in unintentional information disclosure or abnormal termination.

Recommendation

Severity

Likelihood

Remediation Cost

Priority

Level

MSC01-A

2 (medium)

1 (unlikely)

2 (medium)

P4

L3

Related Vulnerabilities

Search for vulnerabilities resulting from the violation of this rule on the CERT website.

References

[[Hatton 95]] Section 2.7.2, "Errors of omission and addition"
[[Viega 05]] Section 5.2.17, "Failure to account for default case in switch"


MSC00-A. Compile cleanly at high warning levels      14. Miscellaneous (MSC)       MSC02-A. Avoid errors of omission

  • No labels