2136
Reference Description
CVE-2005-0369 large ID in packet used as array index
https://www.cve.org/CVERecord?id=CVE-2005-0369
CVE-2001-1009 negative array index as argument to POP LIST command
https://www.cve.org/CVERecord?id=CVE-2001-1009
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 1406 Comprehensive Categorization: Improper Input
Validation
1400 2531
Notes
Maintenance
This entry is still under development and will continue to see updates and content improvements.
CWE-1286: Improper Validation of Syntactic Correctness of Input
Weakness ID : 1286
Structure : Simple
Abstraction : Base
Description
The product receives input that is expected to be well-formed - i.e., to comply with a certain syntax
- but it does not validate or incorrectly validates that the input complies with the syntax.
Extended Description
Often, complex inputs are expected to follow a particular syntax, which is either assumed by the
input itself, or declared within metadata such as headers. The syntax could be for data exchange
formats, markup languages, or even programming languages. When untrusted input is not properly
validated for the expected syntax, attackers could cause parsing failures, trigger unexpected errors,
or expose latent vulnerabilities that might not be directly exploitable if the input had conformed to
the syntax.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 20 Improper Input Validation 20
ParentOf 112 Missing XML Validation 269
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 1215 Data Validation Issues 2478
Applicable Platforms
Language : Not Language-Specific (Prevalence = Often)
CWE Version 4.14
CWE-1286: Improper Validation of Syntactic Correctness of Input
CWE-1286: Improper Validation of Syntactic Correctness of Input