Traditional Flaws

• Buffer overflows

• Integer over/under runs

• Race conditions

• Weak access-control

• Error-handling

• Weak hashing schemes