CWE一覧に戻る
CWE-135

マルチバイト文字列長の誤った計算

Incorrect Calculation of Multi-Byte String Length
脆弱性 レビュー中
JA

ワイド文字やマルチバイト文字を含む文字列の長さが正しく計算されません。

EN

The product does not correctly calculate the length of strings that can contain wide or multi-byte characters.

Scope: Integrity, Confidentiality, Availability / Impact: Execute Unauthorized Code or Commands
Scope: Availability, Confidentiality / Impact: Read Memory; DoS: Crash, Exit, or Restart; DoS: Resource Consumption (CPU); DoS: Resource Consumption (Memory)
Scope: Confidentiality / Impact: Read Memory
Always verify the length of the string unit character.
Use length computing functions (e.g. strlen, wcslen, etc.) appropriately with their equivalent type (e.g.: byte, wchar_t, etc.)
MITRE公式ページ — CWE-135