1709
Reference Description
CVE-2011-1959 Chain: large length value causes buffer over-read (CWE-126)
https://www.cve.org/CVERecord?id=CVE-2011-1959
CVE-2011-1848 Use of packet length field to make a calculation, then copy into a fixed-size
buffer
https://www.cve.org/CVERecord?id=CVE-2011-1848
CVE-2011-0105 Chain: retrieval of length value from an uninitialized memory location
https://www.cve.org/CVERecord?id=CVE-2011-0105
CVE-2011-0606 Crafted length value in document reader leads to buffer overflow
https://www.cve.org/CVERecord?id=CVE-2011-0606
CVE-2011-0651 SSL server overflow when the sum of multiple length fields exceeds a given
value
https://www.cve.org/CVERecord?id=CVE-2011-0651
CVE-2010-4156 Language interpreter API function doesn't validate length argument, leading to
information exposure
https://www.cve.org/CVERecord?id=CVE-2010-4156
Affected Resources
• Memory
MemberOf Relationships
This MemberOf relationships table shows additional CWE Catgeories and Views that reference this
weakness as a member. This information is often useful in understanding where a weakness fits
within the context of external information sources.
Nature Type ID Name Page
MemberOf 740 CERT C Secure Coding Standard (2008) Chapter 7 -
Arrays (ARR)
734 2344
MemberOf 802 2010 Top 25 - Risky Resource Management 800 2354
MemberOf 867 2011 Top 25 - Weaknesses On the Cusp 900 2372
MemberOf 874 CERT C++ Secure Coding Section 06 - Arrays and the
STL (ARR)
868 2375
MemberOf 884 CWE Cross-section 884 2567
MemberOf 1160 SEI CERT C Coding Standard - Guidelines 06. Arrays
(ARR)
1154 2457
MemberOf 1399 Comprehensive Categorization: Memory Safety 1400 2525
Taxonomy Mappings
Mapped Taxonomy Name Node ID Fit Mapped Node Name
CERT C Secure Coding ARR38-
C
Imprecise Guarantee that library functions do not
form invalid pointers
Related Attack Patterns
CAPEC-ID Attack Pattern Name
100 Overflow Buffers
256 SOAP Array Overflow
References
[REF-7]Michael Howard and David LeBlanc. "Writing Secure Code". 2nd Edition. 2002
December 4. Microsoft Press. < https://www.microsoftpressstore.com/store/writing-securecode-
9780735617223 >.
[REF-58]Michael Howard. "Address Space Layout Randomization in Windows Vista". < https://
learn.microsoft.com/en-us/archive/blogs/michael_howard/address-space-layout-randomization-inwindows-
vista >.2023-04-07.
CWE Version 4.14
CWE-806: Buffer Access Using Size of Source Buffer
CWE-806: Buffer Access Using Size of Source Buffer