1016
Reference Description
CVE-2006-4434 mail server does not properly handle a long header.
https://www.cve.org/CVERecord?id=CVE-2006-4434
CVE-2010-2753 chain: integer overflow leads to use-after-free
https://www.cve.org/CVERecord?id=CVE-2010-2753
CVE-2006-4997 freed pointer dereference
https://www.cve.org/CVERecord?id=CVE-2006-4997
Affected Resources
• Memory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 398 7PK - Code Quality 700 2323
MemberOf 742 CERT C Secure Coding Standard (2008) Chapter 9 -
Memory Management (MEM)
734 2345
MemberOf 808 2010 Top 25 - Weaknesses On the Cusp 800 2355
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 983 SFP Secondary Cluster: Faulty Resource Use 888 2410
MemberOf 1162 SEI CERT C Coding Standard - Guidelines 08. Memory
Management (MEM)
1154 2458
MemberOf 1200 Weaknesses in the 2019 CWE Top 25 Most Dangerous
Software Errors
1200 2587
MemberOf 1337 Weaknesses in the 2021 CWE Top 25 Most Dangerous
Software Weaknesses
1337 2589
MemberOf 1350 Weaknesses in the 2020 CWE Top 25 Most Dangerous
Software Weaknesses
1350 2594
MemberOf 1387 Weaknesses in the 2022 CWE Top 25 Most Dangerous
Software Weaknesses
1387 2597
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
MemberOf 1425 Weaknesses in the 2023 CWE Top 25 Most Dangerous
Software Weaknesses
1425 2600
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
ISA/IEC 62443 Part 4-1 Req SI-1
7 Pernicious Kingdoms Use After Free
CLASP Using freed memory
CERT C Secure Coding MEM00-
C
Allocate and free memory in the same
module, at the same level of abstraction
CERT C Secure Coding MEM01-
C
Store a new value in pointers
immediately after free()
CERT C Secure Coding MEM30-
C
Exact Do not access freed memory
Software Fault Patterns SFP15 Faulty Resource Use
References
[REF-6]Katrina Tsipenyuk, Brian Chess and Gary McGraw. "Seven Pernicious Kingdoms: A
Taxonomy of Software Security Errors". NIST Workshop on Software Security Assurance Tools
Techniques and Metrics. 2005 November 7. NIST. < https://samate.nist.gov/SSATTM_Content/
CWE Version 4.14
CWE-419: Unprotected Primary Channel
CWE-419: Unprotected Primary Channel