CWE-151
Improper Neutralization of Comment Delimiters
2006-07-19
00h00 +00:00
00h00 +00:00
특정 CWE 알림
특정 CWE의 변경 사항에 대한 정보를 받아보세요.
이름: Improper Neutralization of Comment Delimiters
The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as comment delimiters when they are sent to a downstream component.
일반 정보
취약점 도입 방식
Implementation적용 가능한 플랫폼
언어
클래스: Not Language-Specific (Undetermined)일반적인 결과
| 범위 | 영향 | 가능성 |
|---|---|---|
| Integrity | Unexpected State |
관찰된 예시
| 참고 자료 | 설명 |
|---|---|
CVE-2002-0001 | Mail client command execution due to improperly terminated comment in address list. |
CVE-2004-0162 | MIE. RFC822 comment fields may be processed as other fields by clients. |
CVE-2004-1686 | Well-placed comment bypasses security warning. |
CVE-2005-1909 | Information hiding using a manipulation involving injection of comment code into product. Note: these vulnerabilities are likely vulnerable to more general XSS problems, although a regexp might allow ">!--" while denying most other tags. |
CVE-2005-1969 | Information hiding using a manipulation involving injection of comment code into product. Note: these vulnerabilities are likely vulnerable to more general XSS problems, although a regexp might allow "
|
