1388
Such hooks can be used in defensive software that runs with privileges, such as anti-virus or
firewall, which hooks kernel calls. When the arguments are not validated, they could be used to
bypass the protection scheme or attack the product itself.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 20 Improper Input Validation 20
Weakness Ordinalities
Primary :
Applicable Platforms
Language : Not Language-Specific (Prevalence = Undetermined)
Common Consequences
Scope Impact Likelihood
Integrity Unexpected State
Potential Mitigations
Phase: Architecture and Design
Ensure that all arguments are verified, as defined by the API you are protecting.
Phase: Architecture and Design
Drop privileges before invoking such functions, if possible.
Observed Examples
Reference Description
CVE-2007-0708 DoS in firewall using standard Microsoft functions
https://www.cve.org/CVERecord?id=CVE-2007-0708
CVE-2006-7160 DoS in firewall using standard Microsoft functions
https://www.cve.org/CVERecord?id=CVE-2006-7160
CVE-2007-1376 function does not verify that its argument is the proper type, leading to arbitrary
memory write
https://www.cve.org/CVERecord?id=CVE-2007-1376
CVE-2007-1220 invalid syscall arguments bypass code execution limits
https://www.cve.org/CVERecord?id=CVE-2007-1220
CVE-2006-4541 DoS in IDS via NULL argument
https://www.cve.org/CVERecord?id=CVE-2006-4541
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 991 SFP Secondary Cluster: Tainted Input to Environment 888 2416
MemberOf 1406 Comprehensive Categorization: Improper Input
Validation
1400 2531
Taxonomy Mappings
CWE Version 4.14
CWE-623: Unsafe ActiveX Control Marked Safe For Scripting
CWE-623: Unsafe ActiveX Control Marked Safe For Scripting