Common Weakness Enumeration

CWE-747

Grouping Prohibited

CERT C Secure Coding Standard (2008) Chapter 14 - Miscellaneous (MSC)

Status: Obsolete

API response cwe.mitre.org

Weaknesses in this category are related to the rules and recommendations in the Miscellaneous (MSC) chapter of the CERT C Secure Coding Standard (2008).

Grouping entries organize the catalogue and should not be used to map the root cause of a vulnerability.

Mapping guidance

This entry is a Grouping. Using groupings for mapping has been discouraged since 2019. They are informal organizational groupings of weaknesses that can help CWE users with data aggregation, navigation, and browsing. However, they are not weaknesses in themselves.

See member weaknesses of this category.

Relationships and members
Has Member: CWE-14 · View CWE-734
Has Member: CWE-176 · View CWE-734
Has Member: CWE-20 · View CWE-734
Has Member: CWE-330 · View CWE-734
Has Member: CWE-480 · View CWE-734
Has Member: CWE-482 · View CWE-734
Has Member: CWE-561 · View CWE-734
Has Member: CWE-563 · View CWE-734
Has Member: CWE-570 · View CWE-734
Has Member: CWE-571 · View CWE-734
Has Member: CWE-697 · View CWE-734
Has Member: CWE-704 · View CWE-734
Notes

Relationship

In the 2008 version of the CERT C Secure Coding standard, the following rules were mapped to the following CWE IDs:

CWE-14 MSC06-C Be aware of compiler optimization when dealing with sensitive data

CWE-20 MSC08-C Library functions should validate their parameters

CWE-176 MSC10-C Character Encoding - UTF8 Related Issues

CWE-330 MSC30-C Do not use the rand() function for generating pseudorandom numbers

CWE-480 MSC02-C Avoid errors of omission

CWE-480 MSC03-C Avoid errors of addition

CWE-482 MSC02-C Avoid errors of omission

CWE-561 MSC07-C Detect and remove dead code

CWE-563 MSC00-C Compile cleanly at high warning levels

CWE-570 MSC00-C Compile cleanly at high warning levels

CWE-571 MSC00-C Compile cleanly at high warning levels

CWE-697 MSC31-C Ensure that return values are compared against the proper type

CWE-704 MSC31-C Ensure that return values are compared against the proper type

CWE-758 MSC14-C Do not introduce unnecessary platform dependencies

CWE-758 MSC15-C Do not depend on undefined behavior

Content history
Submission: CWE Content Team · MITRE · 2008-11-24 · CWE 1.1
Modification: CWE Content Team · MITRE · 2017-11-08 · CWE 3.0

updated Description, Name, Relationship_Notes

Modification: CWE Content Team · MITRE · 2019-01-03 · CWE 3.2

updated Description, Name, References

Modification: CWE Content Team · MITRE · 2023-04-27 · CWE 4.11

updated Mapping_Notes

Modification: CWE Content Team · MITRE · 2023-06-29 · CWE 4.12

updated Mapping_Notes

Modification: CWE Content Team · MITRE · 2026-10-28 · CWE 5.0

updated Mapping_Notes, Type

0 vulnerabilities reference this CWE, most recent first.

No vulnerabilities reference this CWE.

No mitigation information available for this CWE.

No CAPEC attack patterns related to this CWE.

← Back to the CWE list