The finance department for an online shopping website has discovered that a number of customers were able to purchase goods and services without any payments. Further analysis conducted by the…

A race condition involves two concurrent processes accessing shared resources in an unsafe order, which is unrelated to numeric value wrap-around from arithmetic operations.

Clickjacking is a UI redress attack that tricks users into interacting with hidden interface elements, and has no relation to arithmetic manipulation of payment values.

Integer overflow occurs when an arithmetic operation produces a result outside the range representable by the data type, causing the value to roll over to an unexpected number. Here, subtracting a large shipping cost from a small balance caused an integer underflow past zero, wrapping the value to a negative number - a classic overflow symptom - which the system then normalized to zero, effectively granting free purchases.

Use after free is a memory corruption vulnerability where code references memory after it has been deallocated, not an arithmetic range issue in numeric input fields.

SQL injection involves inserting malicious SQL statements into input fields to manipulate database queries, not causing arithmetic roll-over in numeric payment calculations.