Skip to content
OpenAdvisories

Weakness (CWE)

CWE-67: Improper Handling of Windows Device Names

Variant Incomplete

The product constructs pathnames from user input, but it does not handle or incorrectly handles a pathname containing a Windows device name such as AUX or CON. This typically leads to denial of service or an information exposure when the application attempts to process the pathname as a regular file.

How to prevent it (1 mitigation)

  1. Implementation

    Be familiar with the device names in the operating system where your system is deployed. Check input for these device names.

Source: MITRE CWE-67

All Critical High Medium Low Exploited only Public exploit

0 results · Clear filters · Feed

Nothing found.