ソスyソスソスソスpソスKソスCソスhソスz

CWE-134

Weakness ID:134(Weakness Base)

Status: Draft

ソスソスソスソスソスソスソスソスソスソスフ厄ソスソス

ソスソスソス

ソスソスソスソスvソスソス

ソス{ソスニ弱性ソスソスソスソスソスンゑソスソスソス\ソスtソスgソスEソスFソスAソスヘ、printf ソスnソスソスフ関撰ソスソスノ外ソスソスソスソスソス逅ァソスソスツ能ソスネ擾ソスソスソスソスソスソスソスソスソスソスソスgソスpソスソスソストゑソスソスワゑソスソスBソスソスソスフ関撰ソスソスヘ、ソスoソスbソスtソス@ソスIソス[ソスoソス[ソスtソスソスソス[ソスソスfソス[ソス^ソス\ソスソスソスフ厄ソスソスソスソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB

ソスニ弱性ソスフ費ソスソスソスソスソスソスソス

ソスソスソスソス

ソスYソスソスソスソスソスソスvソスソスソスbソスgソスtソスHソス[ソスソス

ソスソスソスソス

C ソスソスソスソス
C++
Perl ソスiソスpソスxソスソスj
ソスソスソスソスソスソスソスソスソスソスソスソスTソス|ソス[ソスgソスソスソス骭セソスソス

ソスニ弱性ソスフ費ソスソスソスソスソス

ソスワゑソスノ、ソスソスソス[ソスUソスフ難ソスソスヘゑソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスニゑソスソスト茨ソスソスソスソスvソスソスソスOソスソスソスソスソスソスソスソスソスンゑソスソスワゑソスソスBソス{ソスニ弱性ソスヘ、ソスソスソスソスソスソスソスソスソスが指ソス閧ウソスソストゑソスソスネゑソスソスソスソスOソスソスソスbソスZソス[ソスWソスソスソス\ソスzソスソスソスソスRソス[ソスhソスソスソスノ頻ソスノに費ソスソスソスソスソスソスワゑソスソスB

ソスnソス謇サソス竝托ソスロ会ソスソスソスソスフ場合ソスノは、ソスソスソスソスナ有ソスフソスソスbソスZソス[ソスWソスフソスソス|ソスWソスgソスソスソスソスソスUソスソスソスソスiソスニゑソスソスト使ソスpソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスBソスソスソスソスソスソス ソスソスソス|ソスWソスgソスソスソスフ撰ソスソスソスノゑソスソスAソスUソスソスソスメはソスソスbソスZソス[ソスWソスソスソスAソスソスソスソスソスAソスRソスソスソスeソスソスソスcソスフ会ソスソスソスソスソスソスソスツ能ソスナゑソスソス驍スソス゚、ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスヘ托ソスソスフ脆弱性ソスフ鯉ソスソスハとゑソスソスト費ソスソスソスソスソスソスワゑソスソスB

ソスソスハ的ソスネ影ソスソス

 

ソスeソスソスソスソスソスけゑソスヘ茨ソス ソスeソスソス
ソス@ソスソスソスソス ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスヘ、ソスvソスソスソスOソスソスソスソスソスヨの攻ソスソスソスソスPソスソスソスソスソスソスソスソスlソスネ擾ソスソスフ開ソスソスソスソスソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB
ソスAソスNソスZソスXソスソスソスソス ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスノゑソスソスAソスCソスモのコソス[ソスhソスソスソスソスソスsソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB

 

ソスUソスソスソスソスソスけゑソスツ能ソスソス

ソスソスソスノ搾ソスソスソス

ソスソスソスoソスソスi

ソスソスソスソスソステ的ソスソスソスソス
ソス{ソスニ弱性ソスヘ趣ソスソスソスソステ的ソスソスソスヘにゑソスソスソスト鯉ソスソスoソスソスソスツ能ソスナゑソスソスBソスナ近のツソス[ソスソスソスフ托ソスソスソスソスヘ、ソスtソスHソス[ソスソスソスXソス|ソスWソスeソスBソスuソスソスソスナ擾ソスソスソスソスソスソス驍スソス゚に、ソスfソス[ソス^ソスtソスソスソス[ソスソスソスヘや制ソスソスxソス[ソスXソスフ技ソスpソスソスソスgソスpソスソスソストゑソスソスワゑソスソスB

ソスuソスソスソスbソスNソス{ソスbソスNソスX:
ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスヘ、ソスノめて抵ソスソスソスソスソスソスソス (ソスGソスソスソス[ソスソスソスbソスZソス[ソスWソスフソスソスOソス謫セソスソス) ソスナ費ソスソスソスソスソスソスソス鼾ソスソスソスソスソスソスソスソスソス゚、ソスuソスソスソスbソスNソス{ソスbソスNソスXソスソスソスソスソスノゑソス骭滂ソスmソスヘ搾ソスソスソスナゑソスソスBソスソスソスン的ソスネ厄ソスソスフ托ソスソスソスソスヘ、ソス\ソス[ソスXソスRソス[ソスhソス笂ッソスソスソスフソソス[ソスXソスノ関連ソスソスソスネゑソスソスAソスソスソスsソスtソス@ソスCソスソスソスノ托ソスソスンゑソスソスソスXソスソスソスノゑソスソスソスワゑソスソスB

ソスLソスソスソスソスソスFソスソスソスソスI

ソスニ趣ソスネコソス[ソスhソスソス

ソスソス 1:

 

ソスネ会ソスソスフ暦ソスヘ、printWrapper() ソスヨ撰ソスソスフ抵ソスソスナ、printf() ソスソスソストび出ソスソスソスソスソス゚に攻ソスソスソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスBソスiソスUソスソスソスソスPソスソスソスソスソスソスソス驍スソス゚、ソスXソス^ソスbソスNソスoソスbソスtソス@ソス[ソスソスソスヌ会ソスソスソスソスソスワゑソスソスソスソスBソスj

ソスTソスソスソスvソスソスソスソスソスソスF C ソスiソスソスソスソスソスソスj
#include <stdio.h>

void printWrapper(char *string) {

printf(string);
}

int main(int argc, char **argv) {

char buf[5012];
memcpy(buf, argv[1], 5012);
printWrapper(argv[1]);
return (0);
}

 

ソスソス 2:

 

ソスネ会ソスソスフ暦ソスヘ、snprintf()ソス利用ソスソスソストコソス}ソスソスソスhソスソスソスCソスソスソスフ茨ソスソスソスソスソスソスoソスbソスtソス@ソスノコソスsソス[ソスソスソスワゑソスソスB

ソスTソスソスソスvソスソスソスソスソスソスF C ソスiソスソスソスソスソスソスj
int main(int argc, char **argv){
char buf[128];
...
snprintf(buf,128,argv[1]);
}

ソスソスソスフコソス[ソスhソスナは、ソスUソスソスソスメゑソスソスXソス^ソスbソスNソスフ難ソスソスeソスソスソス{ソスソスソスソスソスAソスソスソスソスソスwソスソスqソスソスソスワむコソス}ソスソスソスhソスソスソスCソスソスソスフ茨ソスソスソスソスソスソスgソスpソスソスソストスソス^ソスbソスNソスノ擾ソスソスソスソスソスソズゑソスソスニゑソスソスツ能ソスナゑソスソスBソスu%xソスv ソスネどの擾ソスソスソスソスwソスソスqソスソスソスAソスヨ撰ソスソスソスソスvソスソスソスソスソスソスネ擾ソスノ難ソスソスヘゑソスソス驍アソスニで、ソスXソス^ソスbソスNソスフ難ソスソスeソスソスヌみ趣ソス驍アソスニゑソスソスツ能ソスナゑソスソスB(ソスソスソスフ暦ソスナは、ソスヨ撰ソスソスヘ擾ソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスけ趣ソスソスソストゑソスソスワゑソスソスソスB)

ソスUソスソスソスメは「%nソスvソスソスソスgソスpソスソスソスAsnprintf() ソスノゑソス閧アソスソスワでの出ソスヘバソスCソスgソスソスソスソスソスwソス閧ウソス黷スソスソスソスソスソスノ擾ソスソスソスソスソスソスンなゑソスソスソスAソスXソス^ソスbソスNソスノ擾ソスソスソスソスソスソズ可能ソスソスソスソスソスソスソスソスワゑソスソスBソスソスソスソスヘ、ソスソスソスソスソスソスソスソスlソスソスヌみ搾ソスソズとゑソスソスソスソスAソスzソス閧ウソス黷スソスソスソスソスニは異なゑソスソスソスフでゑソスソスB ソスIソスソスソスネ趣ソスソスソスナは、ソスXソス^ソスbソスNソスソスフポソスCソスソスソス^ソスlソスソスソスソスソスSソスノ撰ソスソス艪キソス驍スソス゚に、4 ソスoソスCソスgソスソスソスソスソス轤オソスト擾ソスソスソスソスソスソスンまゑソスソスB

 

ソスソス 3:

 

ソスソスソスソスソスノゑソスソスソストは、ソスソスソスソスソスソスソスフ位置ソス制御すソス髀托ソスソスソスwソスソスqソスノゑソスソスAソスソスソスソスソスソスソスソスヌみ擾ソスソスソスソスソスソスソスUソスソスソスソスソスソスソスソスソスソスソスソスツ能ソスソスソスソスソスソスソスワゑソスワゑソスソスBソスソスソスソスソスwソスソスqソスフ暦ソスニゑソスソスソス glibc ソスナ記ソスqソスソスソス黷スソスネ会ソスソスフコソス[ソスhソスソスソスソスソスソスソスワゑソスソスB

ソスTソスソスソスvソスソスソスソスソスソスF C ソスiソスソスソスソスソスソスj
printf("%d %d %1$d %1$d¥n", 5, 9);


ソスソスソスフコソス[ソスhソスヘ、 ソスu5 9 5 5ソスv ソスニ出ソスヘゑソスソスソスワゑソスソスBソスワゑソスソスAhalf-writes (%hn) ソスソスソスgソスpソスソスソストゑソスソスAソスソスソスソスソスソスソスソスソスフ任ソスモゑソス DWORDS ソス正確ソスノ撰ソスソス艪キソス驍アソスニゑソスソスツ能ソスナゑソスソスBソスソスソスフゑソスソスニにゑソスソスAソスソス1ソスフ様ソスネ、4 ソスoソスCソスgソスソスソスソスソス轤オソスト擾ソスソスソスソスソスソズ必ソスvソスフゑソスソスソスUソスソスソスソスPソスソスソスソスソスソスソス驍アソスニゑソスソスツ能ソスナゑソスソスB

 

ソスソスソスソスソスソスソス黷スソスソスソスソス

 

ソスQソスソス ソスレ搾ソス
CVE-2002-1825 format string in Perl program
CVE-2001-0717 format string in bad call to syslog function
CVE-2002-0573 format string in bad call to syslog function
CVE-2002-1788 format strings in NNTP server responses
CVE-2007-2027 Chain: untrusted search path enabling resultant format string by loading malicious internationalization messages

 

ソスソスQソスフ緩和ソスソス

ソスtソスFソス[ソスY:ソスvソスソスソスソス`

ソス{ソスニ弱性ソスフ影ソスソスソスソスソスけなゑソスソスソスソスソスソスソスgソスpソスソスソスト会ソスソスソスソスソスソスB

ソスtソスFソス[ソスY:ソスソスソスソス

ソスSソストの擾ソスソスソスソスソスソスソスソスソスヨ撰ソスソスソスソスAソスソスソス[ソスUソスソスソスソスソスソスナゑソスソスネゑソスソステ的ソスネ包ソスソスソスソスソスナゑソスソスソスAソスソスソスフ擾ソスAソスソスソスフ関撰ソスソスノ適ソスリな撰ソスソスフ茨ソスソスソスソスソスソスnソスソスソスソストゑソスソス驍アソスニゑソスソスmソスFソスソスソスト会ソスソスソスソスソスソスBソスツ能ソスネゑソスホ、ソスソスソスソスソスソスソスソスソスソスノゑソスソスソスソスソス ソスu%nソスv ソスソスソスTソス|ソス[ソスgソスソスソスネゑソスソスヨ撰ソスソスソスソスgソスpソスソスソスト会ソスソスソスソスソスソスB

ソスrソスソスソスhソスFソスsソスKソスリな使ソスpソスソスソスxソスソスソスソスソストゑソスソスソスツ能ソスソスソスソスソスソスソス驍スソス゚、ソスRソスソスソスpソスCソスソスソスソスソスソスムソスソスソスソスJソス[ソスフ警ソスソスソスノ抵ソスソスモゑソスソスト会ソスソスソスソスソスソスB

ソスソスソスフ托ソスソスフ補足

ソスソスソスソスソスソスソスソスソスソスフ脆弱性ソスヘ、ソスソスハ的ソスノバソスbソスtソス@ソスIソス[ソスoソス[ソスtソスソスソス[ソスフカソスeソスSソスソスソスノ包ソスソズゑソスソスソスワゑソスソスソスソスAソスソスソスソスソスノはバソスbソスtソス@ソスヘオソス[ソスoソス[ソスtソスソスソス[ソスソスソストゑソスソスワゑソスソスソスB
ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスノゑソスソスソスソスソスニ弱性ソスヘ、ソスソスrソスIソスVソスソスソスソスソスソスソスナゑソスソスソス (1999ソスソス) ソスAソスツ変茨ソスソスソスソスソスソスけ趣ソスソスヨ撰ソスソスソスソスAソスけ趣ソスソスソスソスソスソスソスソスソスフ撰ソスソスソスソスmソスFソスソスソス骭サソスソスソスIソスネ趣ソスiソスソスソスソスソスンゑソスソスネゑソスソスソスソスニに起ソスソスソスソスソスワゑソスソスBCソスソスソスソスフソスソスソスソス^ソスCソスソスソスヨ撰ソスソスソスソスワめ、ソスツ変茨ソスソスソスソスソスソスけ趣ソスソスヨ撰ソスソスフ抵ソスソスナ最ゑソスソスソスハ的ソスネゑソスソスフは、 printf() ソスnソスソスナゑソスソスB
ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスヘ様ソスXソスネ形ソスナ鯉ソスソスソスワゑソスソスB
ソスソスソスソスソスwソスソスqソスフなゑソス *printf() ソスRソス[ソスソスソスヘ危険ソスナゑソスソスソスAソスUソスソスソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスBソス痰ヲソスホ、ソスソスソスソスソスRソスソスソスeソスLソスXソスgソスノゑソスソスソスソスト、printf(y,input); ソスヘ攻ソスソスソスソスソスソス驍アソスニゑソスソスソスソスソスワゑソスソスが、printf(input); ソスノは攻ソスソスソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB printf(input); ソスRソス[ソスソスソスソスソスsソスソスソスノ暦ソスソスpソスソスソス黷スソスソスソスハ、ソスソスソスヘ包ソスソスソスソスソスヘ擾ソスソスソスソスwソスソスqソスニゑソスソスト使ソスpソスソスソスソス驍スソス゚、ソスUソスソスソスメにスソス^ソスbソスNソスソスソスソスソスソスソスソス`ソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスBソスcソスソスソスソスソスpソスソスソスソスソス[ソス^ソスヘスソス^ソスbソスNソスソスソスソスソスソスソスソスoソスソスソスソス驍スソス゚、ソスUソスソスソスメは擾ソスソスソスソスwソスソスqソスニ具ソスソスノ難ソスソスヘ包ソスソスソスソスソスソスソスlソス゚搾ソスソスン、ソスXソス^ソスbソスNソスフ値ソスソスヌみ趣ソスソスnソス゚まゑソスソスBソスナ茨ソスソスフ場合ソスノは、ソスソスソスフ不ソスソスソスソスソスpソスノゑソスソスAソスCソスモの値 (ソスワゑソスソスヘ攻ソスソスソスvソスソスソスOソスソスソスソスソスフ擾ソスソスソスソスニなゑソスl) ソスソスソスメ難ソスソスソスソスフプソスソスソスOソスソスソスソスソスフソスソスソスソスソスソスノ擾ソスソスソスソスソスソズ撰ソスソスソスソス^ソスソスソストゑソスソスワゑソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB

ソスソスハ的ソスノ、ソスUソスソスソスホ象となゑソスフはフソス@ソスCソスソスソスソスソスAソスvソスソスソスZソスXソスソスソスAソスソスソスハ子ソスナゑソスソスB

ソスソスソスソスソスソスソスソスソスソスフ厄ソスソスヘ、C/C++ソスソスソスソスノゑソスソスソスソスソスソスソスmソスフ脆弱性ソスナゑソスソスソスAソスeソスユに鯉ソスソスmソスナゑソスソス驍アソスニゑソスソスソスソスソスソスト鯉ソスソスンはほとゑソスヌ托ソスソスンゑソスソスワゑソスソスソスBソスソスソスソスソスソスソスソスソスソスフ厄ソス閧ェソスUソスソスソスソスソスけゑソスソスネ鯉ソスソスソスソスフ茨ソスツゑソス ソスu%nソスv ソスフ擾ソスソスソスソスwソスソスqソスノゑソスソスソスワゑソスソスBソスu%nソスvソスヘ、ソスソスソスソスソスノゑソスソスソスト指ソス閧ウソス黷スソスソスソスソスソスソスソスノ対ゑソスソスAソスソスソスソスワでに擾ソスソスソスソスソスソスソスソスソスノゑソスソスソスト表ソスソスソスソスソス黷スソスソスソスソスソスソスソスソスソスソスソスソスソスソスソスンまゑソスソスBソスソスソスソスソスソスソスソスソスソスソスソスIソスソスソスノ撰ソスソスソスソスソスソス驍アソスニで、ソスソスソスモゑソスソス驛ソス[ソスUソスヘスソス^ソスbソスNソスフ値ソス利用ソスソスソスソス write-what-where condition (CWE-123) ソスソスソスソスソスソスソスNソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB
ソスワゑソスソスAソスソスソスフ擾ソスソスソスソスwソスソスqソスソスソスソスソスlソスノ攻ソスソスソスノ使ソスpソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスBソス痰ヲソスホ、ソスu%9999sソスvソスフ擾ソスソスソスソスwソスソスqソスヘ、ソスoソスbソスtソス@ソスIソス[ソスoソス[ソスtソスソスソス[ソスフ誘ソスソスソスソスAfprintf ソスフ様ソスネフソス@ソスCソスソスソスtソスHソス[ソス}ソスbソスgソスヨ撰ソスソスナ使ソスpソスソスソス黷スソス鼾ソスAソス\ソスソスソスソスソスソスソスソスソスソスソス蛯ォソスネ出ソスヘを生撰ソスソスソスソスソスツ能ソスソスソスソスソスソスソスソスワゑソスソスB

ソスソスソスソスソスノゑソスソスソスソス髑シソスフ脆弱性ソスニの依托ソスソスヨ係

 

ソスヒ托ソスソスヨ係 ソスレ搾ソス
ソスニ暦ソスソスI ソスソスソスフ脆弱性ソスフ有ソスソスソスノ関係ソスソスソスソスソスAソスニ暦ソスソスソスソスト費ソスソスソス

 

ソスヨ係ソスソス

 

Nature Type ID Name View(s) this relationship pertains to
ChildOf Weakness Class 20 Improper Input Validation Seven Pernicious Kingdoms (primary)700
ChildOf Weakness Class 74 Failure to Sanitize Data into a Different Plane (aka 'Injection') Development Concepts (primary)699
Research Concepts (primary)1000
ChildOf Category 133 String Errors Development Concepts699
ChildOf Category 633 Weaknesses that Affect Memory Resource-specific Weaknesses (primary)631
ChildOf Category 726 OWASP Top Ten 2004 Category A5 - Buffer Overflows Weaknesses in OWASP Top Ten (2004) (primary)711
ChildOf Category 743 CERT C Secure Coding Section 09 - Input Output (FIO) Weaknesses Addressed by the CERT C Secure Coding Standard (primary)734
ChildOf Category 808 2010 Top 25 - Weaknesses On the Cusp Weaknesses in the 2010 CWE/SANS Top 25 Most Dangerous Programming Errors(primary)800
PeerOf Weakness Base 123 Write-what-where Condition Research Concepts1000
MemberOf View 630 Weaknesses Examined by SAMATE Weaknesses Examined by SAMATE (primary)630
MemberOf View 635 Weaknesses Used by NVD Weaknesses Used by NVD (primary)635

 

ソスvソスソスソスソスソスソスソスソス ソスiCWE ソスフ鯉ソスソスソスソスj

Cソスソスソスソスネ外ソスフ鯉ソスソスソスノゑソスソスソスソス髀托ソスソスソスソスソスソスソスソスフ厄ソスソスヘ抵ソスソスソスソスソスソスナゑソスソスBソスソスソスソスソスソスソスワゑソスソスヘデソスBソスXソスNソスソスソスソスAソスRソスソスソスgソスソスソス[ソスソスソスソスソスソスAソスfソス[ソス^ソスjソスソスソスヘ、PerlソスA PHPソスAPython ソスネどゑソス Cソスソスソスソス ソスネ外ソスフ鯉ソスソスソスナ擾ソスソスソスソス黷スソスAソスvソスソスソスPソス[ソスVソスソスソスソスソスノゑソスソスソスソス髀托ソスソスソスソスソスソスソスソスフ攻ソスソスソスフ要ソスソスソスニなゑソスワゑソスソスB

ソスeソスソスソスソスソスけゑソスVソスXソスeソスソスソスソスソス\ソス[ソスX

ソスソスソスソスソスソス

ソス@ソス\ソスソスソスソス

ソスソスソスOソスフ取得
ソスGソスソスソス[
ソスソスハ的ソスネアソスEソスgソスvソスbソスg

ソスソスソスソスソスフ撰ソスソスソス

ソスsソスソスソスmソスiソスJソスソスソスメの行ソスソスソスフ鯉ソスソスハにゑソスソスネゑソスソスニ弱性ソスj   

ソスソスソスgソスDソスナの包ソスソスソス

 

ソスgソスDソスソスソスワゑソスソスヘ組ソスDソスナの包ソスソスソス ソスmソス[ソスh ID CWEソスフ包ソスソズとの適ソスソスソスx ソスソスソズ厄ソス
PLOVER Format string vulnerability
7 Pernicious Kingdoms Format String
CLASP Format string problem
CERT C Secure Coding FIO30-C Exact Exclude user input from format strings
OWASP Top Ten 2004 A1 CWE More Specific Unvalidated Input
CERT C Secure Coding FIO30-C Exclude user input from format strings
WASC 6 Format String

 

ソスヨ連ソスソスソスソスUソスソスソスpソス^ソス[ソスソス

 

CAPEC-ID ソスUソスソスソスpソス^ソス[ソスソスソスソス (CAPEC Version 1.5)
67 String Format Overflow in syslog()

 

ソスzソスソスソスCソスgソス{ソスbソスNソスXソスフ抵ソス`

ソスRソス[ソスhソスpソスXソスソスソスネ会ソスソスフ擾ソスソスソスソス満ゑソスソスソスソスニ弱性
1. ソスJソスnソスXソスeソス[ソスgソスソスソスソスソスgソスナ難ソスソスヘゑソスソスソスtソスソスソスソス鼾
2. ソスネ会ソスソスフ擾ソスソスソスソス満ゑソスソスソスソスIソスソスソスXソスeソス[ソスgソスソスソスソスソスgソスナ包ソスソスソスソス処暦ソスソスヨ撰ソスソスノ擾ソスソスソスソスソスnソスソスソス鼾
    ソスEソスソスソスヘデソス[ソス^ソスヘ包ソスソスソスソスソスフ一部ソスナゑソスソスソスAソスソスソスツ、ソス]ソスワゑソスソスソスソスネゑソスソスソスソスソスソスソスソスソスソスソスナゑソスソスソス鼾
ソスソスソスソスLソスフ「ソス]ソスワゑソスソスソスソスネゑソスソスvソスニは、ソスネ会ソスソスフ擾ソスヤゑソスソスwソスソスソスワゑソスソスB
1. ソスソスソスリゑソスソスソストゑソスソスネゑソス
2. ソスソスソスソスソスソスソスソス@ソスナ鯉ソスソスリゑソスソスソストゑソスソスソス

ソスQソスソス

Steve Christey. "Format String Vulnerabilities in Perl Programs". <http://www.securityfocus.com/archive/1/418460/30/0/threaded>.
Hal Burch and Robert C. Seacord. "Programming Language Format String Vulnerabilities". <http://www.ddj.com/dept/security/197002914>.
Tim Newsham. "Format String Attacks". Guardent. September 2000. <http://www.lava.net/~newsham/format-string-attacks.pdf>.
[REF-11] M. Howard and D. LeBlanc. "Writing Secure Code". Chapter 5, "Format String Bugs" Page 147. 2nd Edition. Microsoft. 2002. 

ソスXソスVソスソスソスソス

[2011ソスN04ソスソス21ソスソス]
  2010ソスN10ソスソス12ソスソスソスソスソス_ソスフデソス[ソス^ソスソスソスソスソスノ更ソスV
[2009ソスN06ソスソス29ソスソス]
  2009ソスN02ソスソス02ソスソスソスソスソス_ソスフ会ソスソスL URL ソスソスソスソスソスノ作成
    http://cwe.mitre.org/data/definitions/134.html


ソスoソス^ソスソス 2011/04/21

ソスナ終ソスXソスVソスソス 2023/04/04


OSZAR »