CVEvulnerability
CVE-2007-1770
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-120
Description
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.
Affected configurations
• esri arcsde 8.3
• esri arcsde 9.0
• esri arcsde 9.1
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507 Broken Link
- http://secunia.com/advisories/24639 Broken Link
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260 Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261 Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262 Vendor Advisory
- http://www.securityfocus.com/bid/23175 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1017874 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/1140 Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33282 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33457 Third Party Advisory, VDB Entry
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507 Broken Link
- http://secunia.com/advisories/24639 Broken Link
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260 Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261 Vendor Advisory
- http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262 Vendor Advisory
- http://www.securityfocus.com/bid/23175 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1017874 Broken Link, Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/1140 Broken Link, Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33282 Third Party Advisory, VDB Entry
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33457 Third Party Advisory, VDB Entry