logo

CWE-147 - Improper Neutralization of Input Terminators

CWE-147

  • Abstraction:
  • Variant
  • Structure:
  • Simple
  • Status:
  • Draft
Weakness Name

Improper Neutralization of Input Terminators

Description

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as input terminators when they are sent to a downstream component.

For example, a "." in SMTP signifies the end of mail message data, whereas a null character can be used for the end of a string.

Common Consequences

Scope: Integrity

Impact: Unexpected State

Related Weaknesses
  • Release Date:
  • 2006-07-19
  • Latest Modification Date:
  • 2023-06-29

Free security scan for your website