2323
encountered during the normal operation of the product. Presumably, most bugs related to
common conditions are found and eliminated during development and testing. In some cases, the
attacker can directly control or influence the environment to trigger the rare conditions.
Membership
Nature Type ID Name Page
MemberOf 699 Software Development 699 2555
MemberOf 728 OWASP Top Ten 2004 Category A7 - Improper Error
Handling
711 2337
HasMember 209 Generation of Error Message Containing Sensitive
Information
699 533
HasMember 248 Uncaught Exception 699 596
HasMember 252 Unchecked Return Value 699 606
HasMember 253 Incorrect Check of Function Return Value 699 613
HasMember 390 Detection of Error Condition Without Action 699 943
HasMember 391 Unchecked Error Condition 699 948
HasMember 392 Missing Report of Error Condition 699 951
HasMember 393 Return of Wrong Status Code 699 953
HasMember 394 Unexpected Status Code or Return Value 699 955
HasMember 395 Use of NullPointerException Catch to Detect NULL
Pointer Dereference
699 957
HasMember 396 Declaration of Catch for Generic Exception 699 959
HasMember 397 Declaration of Throws for Generic Exception 699 961
HasMember 544 Missing Standardized Error Handling Mechanism 699 1256
HasMember 584 Return Inside Finally Block 699 1317
HasMember 617 Reachable Assertion 699 1378
HasMember 756 Missing Custom Error Page 699 1579
Notes
Other
Many researchers focus on the resultant weaknesses and do not necessarily diagnose whether a
rare condition is the primary factor. However, since 2005 it seems to be reported more frequently
than in the past. This subject needs more study.
References
[REF-44]Michael Howard, David LeBlanc and John Viega. "24 Deadly Sins of Software Security".
McGraw-Hill. 2010.
Category-398: 7PK - Code Quality
Category ID : 398
Summary
This category represents one of the phyla in the Seven Pernicious Kingdoms vulnerability
classification. It includes weaknesses that do not directly introduce a weakness or vulnerability,
but indicate that the product has not been carefully developed or maintained. According to the
authors of the Seven Pernicious Kingdoms, "Poor code quality leads to unpredictable behavior.
From a user's perspective that often manifests itself as poor usability. For an adversary it provides
an opportunity to stress the system in unexpected ways."
Membership
CWE Version 4.14
CWE-399: Resource Management Errors
CWE-399: Resource Management Errors