491
[REF-155]Halvar Flake. "Third Generation Exploits". presentation at Black Hat
Europe 2001. < https://view.officeapps.live.com/op/view.aspx?src=https%3A%2F
%2Fwww.blackhat.com%2Fpresentations%2Fbh-europe-01%2Fhalvar-flake%2Fbh-europe-01-
halvarflake.ppt&wdOrigin=BROWSELINK >.2023-04-07.
[REF-156]Steve Christey. "Off-by-one errors: a brief explanation". Secprog and SC-L mailing list
posts. 2004 May 5. < http://marc.info/?l=secprog&m=108379742110553&w=2 >.
[REF-157]klog. "The Frame Pointer Overwrite". Phrack Issue 55, Chapter 8. 1999 September 9. <
https://kaizo.org/mirrors/phrack/phrack55/P55-08 >.2023-04-07.
[REF-140]Greg Hoglund and Gary McGraw. "Exploiting Software: How to Break Code". 2004
February 7. Addison-Wesley. < https://www.amazon.com/Exploiting-Software-How-Break-Code/
dp/0201786958 >.2023-04-07.
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
CWE-194: Unexpected Sign Extension
Weakness ID : 194
Structure : Simple
Abstraction : Variant
Description
The product performs an operation on a number that causes it to be sign extended when it is
transformed into a larger data type. When the original number is negative, this can produce
unexpected values that lead to resultant weaknesses.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 681 Incorrect Conversion between Numeric Types 1495
Relevant to the view "CISQ Quality Measures (2020)" (CWE-1305)
Nature Type ID Name Page
ChildOf 681 Incorrect Conversion between Numeric Types 1495
Relevant to the view "CISQ Data Protection Measures" (CWE-1340)
Nature Type ID Name Page
ChildOf 681 Incorrect Conversion between Numeric Types 1495
Applicable Platforms
Language : C (Prevalence = Undetermined)
Language : C++ (Prevalence = Undetermined)
Likelihood Of Exploit
High
Common Consequences
CWE Version 4.14
CWE-194: Unexpected Sign Extension
CWE-194: Unexpected Sign Extension