1503
Reference Description
CVE-2004-1363 substitution overflow: buffer overflow using environment variables that are
expanded after the length check is performed
https://www.cve.org/CVERecord?id=CVE-2004-1363
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 738 CERT C Secure Coding Standard (2008) Chapter 5 -
Integers (INT)
734 2342
MemberOf 739 CERT C Secure Coding Standard (2008) Chapter 6 -
Floating Point (FLP)
734 2343
MemberOf 752 2009 Top 25 - Risky Resource Management 750 2353
MemberOf 872 CERT C++ Secure Coding Section 04 - Integers (INT) 868 2374
MemberOf 873 CERT C++ Secure Coding Section 05 - Floating Point
Arithmetic (FLP)
868 2375
MemberOf 977 SFP Secondary Cluster: Design 888 2407
MemberOf 1003 Weaknesses for Simplified Mapping of Published
Vulnerabilities
1003 2576
MemberOf 1137 SEI CERT Oracle Secure Coding Standard for Java -
Guidelines 03. Numeric Types and Operations (NUM)
1133 2445
MemberOf 1158 SEI CERT C Coding Standard - Guidelines 04. Integers
(INT)
1154 2456
MemberOf 1159 SEI CERT C Coding Standard - Guidelines 05. Floating
Point (FLP)
1154 2457
MemberOf 1306 CISQ Quality Measures - Reliability 1305 2483
MemberOf 1308 CISQ Quality Measures - Security 1305 2485
MemberOf 1340 CISQ Data Protection Measures 1340 2590
MemberOf 1408 Comprehensive Categorization: Incorrect Calculation 1400 2534
Notes
Research Gap
Weaknesses related to this Pillar appear to be under-studied, especially with respect to
classification schemes. Input from academic and other communities could help identify and
resolve gaps or organizational difficulties within CWE.
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding FLP32-C CWE More
Abstract
Prevent or detect domain and range
errors in math functions
CERT C Secure Coding INT07-C Use only explicitly signed or unsigned
char type for numeric values
CERT C Secure Coding INT13-C Use bitwise operators only on unsigned
operands
CERT C Secure Coding INT33-C CWE More
Abstract
Ensure that division and remainder
operations do not result in divide-byzero
errors
CERT C Secure Coding INT34-C CWE More
Abstract
Do not shift an expression by a
negative number of bits or by greater
than or equal to the number of bits that
exist in the operand
CWE Version 4.14
CWE-683: Function Call With Incorrect Order of Arguments
CWE-683: Function Call With Incorrect Order of Arguments