1805
Nature Type ID Name Page
MemberOf 1412 Comprehensive Categorization: Poor Coding Practices 1400 2538
Related Attack Patterns
CAPEC-ID Attack Pattern Name
133 Try All Common Switches
190 Reverse Engineer an Executable to Expose Assumed Hidden Functionality
CWE-913: Improper Control of Dynamically-Managed Code Resources
Weakness ID : 913
Structure : Simple
Abstraction : Class
Description
The product does not properly restrict reading from or writing to dynamically-managed code
resources such as variables, objects, classes, attributes, functions, or executable instructions or
statements.
Extended Description
Many languages offer powerful features that allow the programmer to dynamically create or modify
existing code, or resources used by code such as variables and objects. While these features
can offer significant flexibility and reduce development time, they can be extremely dangerous if
attackers can directly influence these code resources in unexpected ways.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 664 Improper Control of a Resource Through its Lifetime 1454
ParentOf 94 Improper Control of Generation of Code ('Code Injection') 219
ParentOf 470 Use of Externally-Controlled Input to Select Classes or Code
('Unsafe Reflection')