1160
[REF-62]Mark Dowd, John McDonald and Justin Schuh. "The Art of Software Security
Assessment". 1st Edition. 2006. Addison Wesley.
CWE-483: Incorrect Block Delimitation
Weakness ID : 483
Structure : Simple
Abstraction : Base
Description
The code does not explicitly delimit a block that is intended to contain 2 or more statements,
creating a logic error.
Extended Description
In some languages, braces (or other delimiters) are optional for blocks. When the delimiter is
omitted, it is possible to insert a logic error in which a statement is thought to be in a block but is
not. In some cases, the logic error can have security implications.
Relationships
The table(s) below shows the weaknesses and high level categories that are related to this
weakness. These relationships are defined as ChildOf, ParentOf, MemberOr and give insight to
similar items that may exist at higher and lower levels of abstraction. In addition, relationships such
as PeerOf and CanAlsoBe are defined to show similar weaknesses that may want to be explored.
Relevant to the view "Research Concepts" (CWE-1000)
Nature Type ID Name Page
ChildOf 670 Always-Incorrect Control Flow Implementation 1475
Relevant to the view "Software Development" (CWE-699)
Nature Type ID Name Page
MemberOf 438 Behavioral Problems 2326
Weakness Ordinalities
Primary :
Indirect :
Applicable Platforms
Language : C (Prevalence = Sometimes)
Language : C++ (Prevalence = Sometimes)
Likelihood Of Exploit
Low
Common Consequences
Scope Impact Likelihood
Confidentiality
Integrity
Availability
Alter Execution Logic
This is a general logic error which will often lead to
obviously-incorrect behaviors that are quickly noticed and
fixed. In lightly tested or untested code, this error may be
introduced it into a production environment and provide
additional attack vectors by creating a control flow path
leading to an unexpected state in the application. The
consequences will depend on the types of behaviors that
are being incorrectly executed.
CWE Version 4.14
CWE-483: Incorrect Block Delimitation
CWE-483: Incorrect Block Delimitation