Types of Flaws

1. Inadvertent

1.1. Validation errors

1.2. Domain errors

1.3. Serializaton or aliasing

1.4. Inadequate ID and Authentication

1.5. Boundary condition violations

1.6. Misc exploitable logic erros

1.7. Lack of rigours parament checking

1.7.1. Buffer overflows can come from other problems

1.7.1.1. Most common source of vulnerabiliteis

1.7.1.2. Buffer overflows can place data in

1.7.1.2.1. user data areas

1.7.1.2.2. system data areas

1.7.1.2.3. User code areas

1.7.1.2.4. system code areas

2. Intentional

2.1. Malicious

2.2. Non malicious