1797
References
[REF-436]mercy. "Exploiting Uninitialized Data". 2006 January. < http://www.felinemenace.org/
~mercy/papers/UBehavior/UBehavior.zip >.
CWE-909: Missing Initialization of Resource
Weakness ID : 909
Structure : Simple
Abstraction : Class
Description
The product does not initialize a critical resource.
Extended Description
Many resources require initialization before they can be properly used. If a resource is not
initialized, it could contain unpredictable or expired data, or it could be initialized to defaults that
are invalid. This can have security implications when the resource is expected to have certain
properties or values.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 665 Improper Initialization 1456
ParentOf 456 Missing Initialization of a Variable 1089
ParentOf 1271 Uninitialized Value on Reset for Registers Holding Security
Settings