Home / Vulnerability Database / Delphi : Obsolete or unsafe function
Delphi

Delphi : Obsolete or unsafe function

Overview

The function used is deprecated or unsafe (regardless of how it is used). It is recommended to replace it with a secure analog.

ShellExecute and WinExec are examples of obsolete Windows functions.

StrCopy, lstrcpy, strcat, strlen, strcmp functions do not work correctly with memory buffers and pointers. In particular, if the strings passed as arguments do not end with a binary zero, the result of the functions’ work is unpredictable. This allows an attacker to implement such attacks as violation of the integrity and operability of the program.

The LoadLibrary function on an unsuccessful call returns an error code that could occur both in the LoadLibrary, itself and in one of the functions it calls. This behavior complicates error handling.

MEDIUM

DerScanner Severity Score

Do you want to fix Delphi : Obsolete or unsafe function in your application?

See also

Delphi

Delphi : Incorrect Raise call

Delphi

Delphi : Empty encryption key

Delphi

Delphi : Weak random number generator