Home / Vulnerability Database / Pascal : Obsolete or unsafe function
Pascal

Pascal : Obsolete or unsafe function

Overview

The function used is deprecated or unsafe (regardless of how it is used). It is recommended to replace it with a secure analog.

ShellExecute and WinExec are examples of obsolete Windows functions.

StrCopy, lstrcpy, strcat, strlen, strcmp functions do not work correctly with memory buffers and pointers. In particular, if the strings passed as arguments do not end with a binary zero, the result of the functions’ work is unpredictable. This allows an attacker to implement such attacks as violation of the integrity and operability of the program.

The LoadLibrary function on an unsuccessful call returns an error code that could occur both in the LoadLibrary, itself and in one of the functions it calls. This behavior complicates error handling.

MEDIUM

DerScanner Severity Score

Do you want to fix Pascal : Obsolete or unsafe function in your application?

See also

Pascal

Pascal : Error handling: generic exception

Pascal

Pascal : Undocumented feature: special account

Pascal

Pascal : Weak hashing algorithm