1498
Reference Description
CVE-2008-3282 Size of a particular type changes for 64-bit platforms, leading to an integer
truncation in document processor causes incorrect index to be generated.
https://www.cve.org/CVERecord?id=CVE-2008-3282
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 738 CERT C Secure Coding Standard (2008) Chapter 5 -
Integers (INT)
734 2342
MemberOf 739 CERT C Secure Coding Standard (2008) Chapter 6 -
Floating Point (FLP)
734 2343
MemberOf 808 2010 Top 25 - Weaknesses On the Cusp 800 2355
MemberOf 848 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 5 - Numeric Types and Operations
(NUM)
844 2363
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 872 CERT C++ Secure Coding Section 04 - Integers (INT) 868 2374
MemberOf 873 CERT C++ Secure Coding Section 05 - Floating Point
Arithmetic (FLP)
868 2375
MemberOf 884 CWE Cross-section 884 2567
MemberOf 998 SFP Secondary Cluster: Glitch in Computation 888 2419
MemberOf 1131 CISQ Quality Measures (2016) - Security 1128 2442
MemberOf 1137 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 03. Numeric Types and Operations (NUM)
1133 2445
MemberOf 1158 SEI CERT C Coding Standard - Guidelines 04. Integers
(INT)
1154 2456
MemberOf 1159 SEI CERT C Coding Standard - Guidelines 05. Floating
Point (FLP)
1154 2457
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1416 Comprehensive Categorization: Resource Lifecycle
Management
1400 2545
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding FLP34-C CWE More
Abstract
Ensure that floating point conversions
are within range of the new type
CERT C Secure Coding INT15-C Use intmax_t or uintmax_t for formatted
IO on programmer-defined integer
types
CERT C Secure Coding INT31-C CWE More
Abstract
Ensure that integer conversions do not
result in lost or misinterpreted data
CERT C Secure Coding INT35-C Evaluate integer expressions in a larger
size before comparing or assigning to
that size
The CERT Oracle Secure
Coding Standard for Java
(2011)
NUM12-J Ensure conversions of numeric types to
narrower types do not result in lost or
misinterpreted data
Software Fault Patterns SFP1 Glitch in computation
CWE Version 4.14
CWE-682: Incorrect Calculation
CWE-682: Incorrect Calculation