Buffer overflow in Esri Arcsde
CVE-2007-4278
Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow in an sprintf function call.
Vulnerability class: Buffer Overflow
EPSS: 0.046 (90.8th percentile) — read the EPSS interpretation.
Affected products
- Esri Arcsde — versions 9.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (x_refsource_SECUNIA, Broken Link, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_XF)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK, Broken Link)
- cve@mitre.org (Third Party Advisory, vdb-entry, Broken Link, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_IDEFENSE, Broken Link, third-party-advisory)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)