913
Reference Description
onUnload method. ** this is one example of the role of "hooks" and context
switches, and should be captured somehow - also a race condition of sorts **
https://www.cve.org/CVERecord?id=CVE-2004-2260
CVE-2004-0191 XSS when web browser executes Javascript events in the context of a new
page while it's being loaded, allowing interaction with previous page in different
domain.
https://www.cve.org/CVERecord?id=CVE-2004-0191
CVE-2004-2491 Web browser fills in address bar of clicked-on link before page has been
loaded, and doesn't update afterward.
https://www.cve.org/CVERecord?id=CVE-2004-2491
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 986 SFP Secondary Cluster: Missing Lock 888 2411
MemberOf 1401 Comprehensive Categorization: Concurrency 1400 2526
Notes
Relationship
Can overlap signal handler race conditions.
Research Gap
Under-studied as a concept. Frequency unknown; few vulnerability reports give enough detail to
know when a context switching race condition is a factor.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
PLOVER Context Switching Race Condition
Related Attack Patterns
CAPEC-ID Attack Pattern Name
26 Leveraging Race Conditions
29 Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions
References
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
CWE-369: Divide By Zero
Weakness ID : 369
Structure : Simple
Abstraction : Base
Description
The product divides a value by zero.
Extended Description
This weakness typically occurs when an unexpected value is provided to the product, or if an
error occurs that is not properly detected. It frequently occurs in calculations involving physical
dimensions such as size, length, width, and height.
CWE Version 4.14
CWE-369: Divide By Zero
CWE-369: Divide By Zero