Home / Vulnerability Database / Pascal : Obsolete or unsafe function
Pascal
Pascal : Obsolete or unsafe function
Classification
OWASP Top 10 2013
OWASP Top 10 2017
OWASP Top 10 2021
PCI DSS 4.0
CWE/SANS Top 25 2011
Overview
The function used is deprecated or unsafe (regardless of how it is used). It is recommended to replace it with a secure analog.
ShellExecute and WinExec are examples of obsolete Windows functions.
StrCopy, lstrcpy, strcat, strlen, strcmp functions do not work correctly with memory buffers and pointers. In particular, if the strings passed as arguments do not end with a binary zero, the result of the functions’ work is unpredictable. This allows an attacker to implement such attacks as violation of the integrity and operability of the program.
The LoadLibrary function on an unsuccessful call returns an error code that could occur both in the LoadLibrary, itself and in one of the functions it calls. This behavior complicates error handling.
MEDIUM
DerScanner Severity Score
Do you want to fix Pascal : Obsolete or unsafe function in your application?
See also
Pascal
Pascal : Error handling: generic exception
Pascal
Pascal : Undocumented feature: special account
Pascal
