Common Weakness Enumeration

CWE-72

Weakness Allowed

Improper Handling of Apple HFS+ Alternate Data Stream Path

Abstraction: Variant · Status: Incomplete

API response cwe.mitre.org

The product does not properly handle special paths that may identify the data or resource fork of a file on the HFS+ file system.

Mapping guidance

This CWE entry is at the Variant level of abstraction, which is a preferred level of abstraction for mapping to the root causes of vulnerabilities.

Carefully read both the name and description to ensure that this mapping is an appropriate fit. Do not try to 'force' a mapping to a lower-level Base/Variant simply to comply with this preferred level of abstraction.

Relationships and members
ChildOf: CWE-66 · View CWE-1000
Modes of introduction
Implementation
Notes

Theoretical

This and similar problems exist because the same resource can have multiple identifiers that dictate which behavior can be performed on the resource.

Research Gap

Under-studied

Content history
Submission: PLOVER · 2006-07-19 · CWE Draft 3
Modification: Eric Dalci · Cigital · 2008-07-01 · CWE 1.0

updated Time_of_Introduction

Modification: CWE Content Team · MITRE · 2008-09-08 · CWE 1.0

updated Relationships, Other_Notes, Taxonomy_Mappings

Modification: David Remahl · Apple · 2008-11-05 · CWE 1.1

clarified description, provided background details, and added demonstrative example

Modification: CWE Content Team · MITRE · 2008-11-24 · CWE 1.1

updated Applicable_Platforms, Background_Details, Demonstrative_Examples, Description, Name, References

Modification: CWE Content Team · MITRE · 2009-05-27 · CWE 1.4

updated Name

Modification: CWE Content Team · MITRE · 2009-10-29 · CWE 1.6

updated Other_Notes, Theoretical_Notes

Modification: CWE Content Team · MITRE · 2011-06-01 · CWE 1.13

updated Common_Consequences

Modification: CWE Content Team · MITRE · 2012-05-11 · CWE 2.2

updated Observed_Examples, Relationships

Modification: CWE Content Team · MITRE · 2014-07-30 · CWE 2.8

updated Relationships

Modification: CWE Content Team · MITRE · 2017-11-08 · CWE 3.0

updated Applicable_Platforms, References, Relationships, Taxonomy_Mappings

Modification: CWE Content Team · MITRE · 2020-02-24 · CWE 4.0

updated Relationships

Modification: CWE Content Team · MITRE · 2023-01-31 · CWE 4.10

updated Description

Modification: CWE Content Team · MITRE · 2023-04-27 · CWE 4.11

updated References, Relationships, Time_of_Introduction

Modification: CWE Content Team · MITRE · 2023-06-29 · CWE 4.12

updated Mapping_Notes

Modification: CWE Content Team · MITRE · 2025-09-09 · CWE 4.18

updated Affected_Resources, Functional_Areas

Modification: CWE Content Team · MITRE · 2025-12-11 · CWE 4.19

updated Demonstrative_Examples, Weakness_Ordinalities

Modification: CWE Content Team · MITRE · 2026-10-28 · CWE 5.0

updated Common_Consequences, Description

0 vulnerabilities reference this CWE, most recent first.

No vulnerabilities reference this CWE.

No mitigation information available for this CWE.

No CAPEC attack patterns related to this CWE.

← Back to the CWE list