CVE-2007-1770
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 16.8%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 16.84% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-120
- Affected
- esri/arcsde
- Source
- cve@mitre.org
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507Broken Link
- http://secunia.com/advisories/24639Broken Link
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262Vendor Advisory
- http://www.securityfocus.com/bid/23175Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1017874Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/1140Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33282Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33457Third Party Advisory, VDB Entry
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507Broken Link
- http://secunia.com/advisories/24639Broken Link
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262Vendor Advisory
- http://www.securityfocus.com/bid/23175Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1017874Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/1140Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33282Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33457Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.