provide the attacker with information on the location, nature, and relationships
among vulnerabilities and weaknesses in the targeted software. This knowledge
then enables the attacker to craft even more effective attacks (see Section 3.2 for
more information on the threats and attacks to which software is subject).