CWE-477: Use of Obsolete Function | Mondoo Vulnerability Intelligence

CWE-477

BaseDraft

Use of Obsolete Function

The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.

16 linked vulnerabilities

1 related weaknesses

Extended Description

Advances in the language
Improved understanding of how operations should be performed effectively and securely
Changes in the conventions that govern certain operations

Implementation

Refer to the documentation for the obsolete function in order to determine why it is deprecated or obsolete and to learn about alternative ways to achieve the same functionality.

Requirements

Consider seriously the security implications of using an obsolete function. Consider using alternate functions.

Other

Quality Degradation

Automated Static Analysis - Binary or Bytecode

Effectiveness: High

According to SOAR [REF-1479], the following detection techniques may be useful:

Manual Static Analysis - Binary or Bytecode

Effectiveness: SOAR Partial

According to SOAR [REF-1479], the following detection techniques may be useful:

Binary / Bytecode disassembler - then use manual analysis for vulnerabilities & anomalies

Dynamic Analysis with Manual Results Interpretation

Effectiveness: High

According to SOAR [REF-1479], the following detection techniques may be useful:

Debugger

Manual Static Analysis - Source Code

Effectiveness: High

According to SOAR [REF-1479], the following detection techniques may be useful:

Automated Static Analysis - Source Code

Effectiveness: High

According to SOAR [REF-1479], the following detection techniques may be useful:

Source Code Quality Analyzer
Source code Weakness Analyzer
Context-configured Source Code Weakness Analyzer

Automated Static Analysis

Effectiveness: High

According to SOAR [REF-1479], the following detection techniques may be useful:

Origin Analysis

Architecture or Design Review

Effectiveness: High

According to SOAR [REF-1479], the following detection techniques may be useful:

Formal Methods / Correct-By-Construction
Inspection (IEEE 1028 standard) (can apply to requirements, design, source code, etc.)

Modes of Introduction

Implementation

Related Weaknesses

CWE-710ChildOf

External Links

MITRE CWE Database