1538
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 851 The CERT Oracle Secure Coding Standard for Java
(2011) Chapter 8 - Exceptional Behavior (ERR)
844 2365
MemberOf 876 CERT C++ Secure Coding Section 08 - Memory
Management (MEM)
868 2376
MemberOf 880 CERT C++ Secure Coding Section 12 - Exceptions and
Error Handling (ERR)
868 2379
MemberOf 961 SFP Secondary Cluster: Incorrect Exception Behavior 888 2399
MemberOf 1141 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 07. Exceptional Behavior (ERR)
1133 2448
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1405 Comprehensive Categorization: Improper Check or
Handling of Exceptional Conditions
1400 2531
Notes
Relationship
This is a high-level class that might have some overlap with other classes. It could be argued that
even "normal" weaknesses such as buffer overflows involve unusual or exceptional conditions.
In that sense, this might be an inherent aspect of most other weaknesses within CWE, similar
to API Abuse (CWE-227) and Indicator of Poor Code Quality (CWE-398). However, this entry is
currently intended to unify disparate concepts that do not have other places within the Research
Concepts view (CWE-1000).
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
The CERT Oracle Secure
Coding Standard for Java
(2011)
ERR06-J Do not throw undeclared checked
exceptions
References
[REF-567]Taimur Aslam. "A Taxonomy of Security Faults in the UNIX Operating System". 1995
August 1. < http://ftp.cerias.purdue.edu/pub/papers/taimur-aslam/aslam-taxonomy-msthesis.pdf >.
[REF-568]Taimur Aslam, Ivan Krsul and Eugene H. Spafford. "Use of A Taxonomy of
Security Faults". 1995 August 1. < https://csrc.nist.gov/csrc/media/publications/conferencepaper/
1996/10/22/proceedings-of-the-19th-nissc-1996/documents/paper057/paper.pdf
>.2023-04-07.
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
[REF-1374]Unciphered. "Randstorm: You Can't Patch a House of Cards". 2023 November 4. <
https://www.unciphered.com/blog/randstorm-you-cant-patch-a-house-of-cards >.2023-11-15.
CWE-704: Incorrect Type Conversion or Cast
Weakness ID : 704
Structure : Simple
Abstraction : Class
Description
CWE Version 4.14
CWE-704: Incorrect Type Conversion or Cast
CWE-704: Incorrect Type Conversion or Cast