CAS-003 · Question #74
The finance department for an online shopping website has discovered that a number of customers were able to purchase goods and services without any payments. Further analysis conducted by the…
The correct answer is C. Integer overflow. Integer overflow errors can occur when a program fails to account for the fact that an arithmetic operation can result in a quantity either greater than a data type's maximum value or less than its
Question
The finance department for an online shopping website has discovered that a number of customers were able to purchase goods and services without any payments. Further analysis conducted by the security investigations team indicated that the website allowed customers to update a payment amount for shipping. A specially crafted value could be entered and cause a roll over, resulting in the shipping cost being subtracted from the balance and in some instances resulted in a negative balance. As a result, the system processed the negative balance as zero dollars. Which of the following BEST describes the application issue?
Options
- ARace condition
- BClick-jacking
- CInteger overflow
- DUse after free
- ESQL injection
How the community answered
(59 responses)- A3% (2)
- B2% (1)
- C88% (52)
- E7% (4)
Explanation
Integer overflow errors can occur when a program fails to account for the fact that an arithmetic operation can result in a quantity either greater than a data type's maximum value or less than its
Topics
Community Discussion
No community discussion yet for this question.