1710
[REF-59]Arjan van de Ven. "Limiting buffer overflows with ExecShield". < https://archive.is/saAFo
>.2023-04-07.
[REF-60]"PaX". < https://en.wikipedia.org/wiki/Executable_space_protection#PaX >.2023-04-07.
[REF-741]Jason Lam. "Top 25 Series - Rank 12 - Buffer Access with Incorrect Length Value".
2010 March 1. SANS Software Security Institute. < https://web.archive.org/web/20100316043717/
http://blogs.sans.org:80/appsecstreetfighter/2010/03/11/top-25-series-rank-12-buffer-access-withincorrect-
length-value/ >.2023-04-07.
[REF-57]Matt Messier and John Viega. "Safe C String Library v1.0.3". < http://www.gnu-darwin.org/
www001/ports-1.5a-CURRENT/devel/safestr/work/safestr-1.0.3/doc/safestr.html >.2023-04-07.
[REF-56]Microsoft. "Using the Strsafe.h Functions". < https://learn.microsoft.com/en-us/windows/
win32/menurc/strsafe-ovw?redirectedfrom=MSDN >.2023-04-07.
[REF-61]Microsoft. "Understanding DEP as a mitigation technology part 1". < https://
msrc.microsoft.com/blog/2009/06/understanding-dep-as-a-mitigation-technology-part-1/
>.2023-04-07.
[REF-76]Sean Barnum and Michael Gegick. "Least Privilege". 2005 September 4. < https://
web.archive.org/web/20211209014121/https://www.cisa.gov/uscert/bsi/articles/knowledge/
principles/least-privilege >.2023-04-07.
[REF-64]Grant Murphy. "Position Independent Executables (PIE)". 2012 November 8. Red Hat. <
https://www.redhat.com/en/blog/position-independent-executables-pie >.2023-04-07.
[REF-1332]John Richard Moser. "Prelink and address space randomization". 2006 July 5. < https://
lwn.net/Articles/190139/ >.2023-04-26.
[REF-1333]Dmitry Evtyushkin, Dmitry Ponomarev, Nael Abu-Ghazaleh. "Jump Over ASLR:
Attacking Branch Predictors to Bypass ASLR". 2016. < http://www.cs.ucr.edu/~nael/pubs/
micro16.pdf >.2023-04-26.
[REF-1334]D3FEND. "Stack Frame Canary Validation (D3-SFCV)". 2023. < https://
d3fend.mitre.org/technique/d3f:StackFrameCanaryValidation/ >.2023-04-26.
[REF-1335]D3FEND. "Segment Address Offset Randomization (D3-SAOR)". 2023. < https://
d3fend.mitre.org/technique/d3f:SegmentAddressOffsetRandomization/ >.2023-04-26.
[REF-1336]D3FEND. "Process Segment Execution Prevention (D3-PSEP)". 2023. < https://
d3fend.mitre.org/technique/d3f:ProcessSegmentExecutionPrevention/ >.2023-04-26.
[REF-1337]Alexander Sotirov and Mark Dowd. "Bypassing Browser Memory Protections: Setting
back browser security by 10 years". 2008. < https://www.blackhat.com/presentations/bh-usa-08/
Sotirov_Dowd/bh08-sotirov-dowd.pdf >.2023-04-26.
CWE-806: Buffer Access Using Size of Source Buffer
Weakness ID : 806
Structure : Simple
Abstraction : Variant
Description
The product uses the size of a source buffer when reading from or writing to a destination buffer,
which may cause it to access memory that is outside of the bounds of the buffer.
Extended Description
When the size of the destination is smaller than the size of the source, a buffer overflow could
occur.
Relationships
CWE Version 4.14
CWE-806: Buffer Access Using Size of Source Buffer
CWE-806: Buffer Access Using Size of Source Buffer