nerdexam
CompTIA

CAS-003 · Question #74

The finance department for an online shopping website has discovered that a number of customers were able to purchase goods and services without any payments. Further analysis conducted by the…

The correct answer is C. Integer overflow. Integer overflow errors can occur when a program fails to account for the fact that an arithmetic operation can result in a quantity either greater than a data type's maximum value or less than its

Technical Integration of Enterprise Security

Question

The finance department for an online shopping website has discovered that a number of customers were able to purchase goods and services without any payments. Further analysis conducted by the security investigations team indicated that the website allowed customers to update a payment amount for shipping. A specially crafted value could be entered and cause a roll over, resulting in the shipping cost being subtracted from the balance and in some instances resulted in a negative balance. As a result, the system processed the negative balance as zero dollars. Which of the following BEST describes the application issue?

Options

  • ARace condition
  • BClick-jacking
  • CInteger overflow
  • DUse after free
  • ESQL injection

How the community answered

(59 responses)
  • A
    3% (2)
  • B
    2% (1)
  • C
    88% (52)
  • E
    7% (4)

Explanation

Integer overflow errors can occur when a program fails to account for the fact that an arithmetic operation can result in a quantity either greater than a data type's maximum value or less than its

Topics

#integer overflow#secure coding#application vulnerability#web application security

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice