351
[REF-1333]Dmitry Evtyushkin, Dmitry Ponomarev, Nael Abu-Ghazaleh. "Jump Over ASLR:
Attacking Branch Predictors to Bypass ASLR". 2016. < http://www.cs.ucr.edu/~nael/pubs/
micro16.pdf >.2023-04-26.
[REF-1335]D3FEND. "Segment Address Offset Randomization (D3-SAOR)". 2023. < https://
d3fend.mitre.org/technique/d3f:SegmentAddressOffsetRandomization/ >.2023-04-26.
[REF-1336]D3FEND. "Process Segment Execution Prevention (D3-PSEP)". 2023. < https://
d3fend.mitre.org/technique/d3f:ProcessSegmentExecutionPrevention/ >.2023-04-26.
[REF-1337]Alexander Sotirov and Mark Dowd. "Bypassing Browser Memory Protections: Setting
back browser security by 10 years". 2008. < https://www.blackhat.com/presentations/bh-usa-08/
Sotirov_Dowd/bh08-sotirov-dowd.pdf >.2023-04-26.
CWE-130: Improper Handling of Length Parameter Inconsistency
Weakness ID : 130
Structure : Simple
Abstraction : Base
Description
The product parses a formatted message or structure, but it does not handle or incorrectly handles
a length field that is inconsistent with the actual length of the associated data.
Extended Description
If an attacker can manipulate the length parameter associated with an input such that it is
inconsistent with the actual length of the input, this can be leveraged to cause the target application
to behave in unexpected, and possibly, malicious ways. One of the possible motives for doing so
is to pass in arbitrarily large input to the application. Another possible motivation is the modification
of application state by including invalid data for subsequent properties of the application. Such
weaknesses commonly lead to attacks such as buffer overflows and execution of arbitrary code.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 240 Improper Handling of Inconsistent Structural Elements 583
CanPrecede 805 Buffer Access with Incorrect Length Value 1702
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ChildOf 119 Improper Restriction of Operations within the Bounds of a
Memory Buffer