CAPEC-128 Integer Attacks
abstraction: standardstatus: activeAn attacker takes advantage of the structure of integer variables to cause these variables to assume values that are not expected by an application. For example, adding one to the largest positive integer in a signed integer variable results in a negative number. Negative numbers may be illegal in an application and the application may prevent an attacker from providing them directly, but the application may not consider that adding two positive numbers can create a negative number do to the structure of integer storage formats.
severity: Medium
01
weaknesses (1)
The CWE weakness classes this flaw belongs to.
02
related attack patterns (2)
Related entries.
03
source
Where this definition is published.