1150
References
[REF-18]Secure Software, Inc.. "The CLASP Application Security Process". 2005. < https://
cwe.mitre.org/documents/sources/TheCLASPApplicationSecurityProcess.pdf >.
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
CWE-480: Use of Incorrect Operator
Weakness ID : 480
Structure : Simple
Abstraction : Base
Description
The product accidentally uses the wrong operator, which changes the logic in security-relevant
ways.
Extended Description
These types of errors are generally the result of a typo by the programmer.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 670 Always-Incorrect Control Flow Implementation 1475
ParentOf 481 Assigning instead of Comparing 1154
ParentOf 482 Comparing instead of Assigning 1157
ParentOf 597 Use of Wrong Operator in String Comparison 1337
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 133 String Errors 2310
MemberOf 438 Behavioral Problems 2326
MemberOf 569 Expression Issues 2330
Applicable Platforms
Language : C (Prevalence = Sometimes)
Language : C++ (Prevalence = Sometimes)
Language : Perl (Prevalence = Sometimes)
Language : Not Language-Specific (Prevalence = Undetermined)
Likelihood Of Exploit
Low
Common Consequences
Scope Impact Likelihood
Other Alter Execution Logic
This weakness can cause unintended logic to be executed
and other unexpected application behavior.
CWE Version 4.14
CWE-480: Use of Incorrect Operator
CWE-480: Use of Incorrect Operator