303
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
OWASP Top Ten 2004 A5 Exact Buffer Overflows
CERT C Secure Coding ARR00-
C
Understand how arrays work
CERT C Secure Coding ARR30-
C
CWE More
Abstract
Do not form or use out-of-bounds
pointers or array subscripts
CERT C Secure Coding ARR38-
C
CWE More
Abstract
Guarantee that library functions do not
form invalid pointers
CERT C Secure Coding ENV01-C Do not make assumptions about the
size of an environment variable
CERT C Secure Coding EXP39-C Imprecise Do not access a variable through a
pointer of an incompatible type
CERT C Secure Coding FIO37-C Do not assume character data has
been read
CERT C Secure Coding STR31-C CWE More
Abstract
Guarantee that storage for strings has
sufficient space for character data and
the null terminator
CERT C Secure Coding STR32-C CWE More
Abstract
Do not pass a non-null-terminated
character sequence to a library function
that expects a string
WASC 7 Buffer Overflow
Software Fault Patterns SFP8 Faulty Buffer Access
Related Attack Patterns
CAPEC-ID Attack Pattern Name
8 Buffer Overflow in an API Call
9 Buffer Overflow in Local Command-Line Utilities
10 Buffer Overflow via Environment Variables
14 Client-side Injection-induced Buffer Overflow
24 Filter Failure through Buffer Overflow
42 MIME Conversion
44 Overflow Binary Resource File
45 Buffer Overflow via Symbolic Links
46 Overflow Variables and Tags
47 Buffer Overflow via Parameter Expansion
100 Overflow Buffers
123 Buffer Manipulation
References
[REF-1029]Aleph One. "Smashing The Stack For Fun And Profit". 1996 November 8. < http://
phrack.org/issues/49/14.html >.
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
[REF-56]Microsoft. "Using the Strsafe.h Functions". < https://learn.microsoft.com/en-us/windows/
win32/menurc/strsafe-ovw?redirectedfrom=MSDN >.2023-04-07.
[REF-57]Matt Messier and John Viega. "Safe C String Library v1.0.3". < http://www.gnu-darwin.org/
www001/ports-1.5a-CURRENT/devel/safestr/work/safestr-1.0.3/doc/safestr.html >.2023-04-07.
[REF-58]Michael Howard. "Address Space Layout Randomization in Windows Vista". < https://
learn.microsoft.com/en-us/archive/blogs/michael_howard/address-space-layout-randomization-inwindows-
vista >.2023-04-07.
CWE Version 4.14
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')