Vulnerability in Esri Arcinfo Workstation

CVE-2005-1394

Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.

EPSS: 0.008 (53.9th percentile) — read the EPSS interpretation.

Affected products

Esri Arcinfo_workstation — versions 9.0
N/a — versions n/a

Weakness classification (CWE)

CWE-134 — Use of Externally-Controlled Format String

References

cve@mitre.org (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
cve@mitre.org (Patch, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link, Vendor Advisory)