CQE-9129: Output Formatting Control

 
Output Formatting Control
[an error occurred while processing this directive] Definition in a New Window Definition in a New Window
Practice ID: 9129 Maturity: Preliminary
+ Description

Description Summary

Formatting Control

Extended Description

Software that is unaware of formatting control incurs the risk of execution of arbitrary code, excessive memory or disk consumption, or the risk of information disclosure, which can severely simplify exploitation of the software.

+ Relationships
NatureTypeIDNameView(s) this relationship pertains to
View
CanPrecede
Co
Consequence		9017Arbitrary Code Execution
Default Graph (primary)9001
CanPrecede
Co
Consequence		9058Security Vulnerabilities
Default Graph (primary)9001
CanPrecede
Co
Consequence		9189Information Disclosure
Default Graph (primary)9001
ParentOf
Is
Issue		134Format String Improper Input Neutralization
Quality Issues Organized by Practices (primary)9002
Page Last Updated or Reviewed: October 01, 2017