Unscored severity · published May 3, 2005
CVE-2005-1393
Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3)…
–
CVSS
0.6%
EPSS
No
On KEV
Description
Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or (5) asrecovery.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Arcinfo Workstation · Esri
9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1393
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1393
marc.info
http://marc.info/?l=full-disclosure&m=111489411524630&w=2
secunia.com
http://secunia.com/advisories/15196
securitytracker.com
http://securitytracker.com/id?1013852
support.esri.com
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015
Exploit
http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt
More from Arcinfo Workstation
–
CVE-2005-1394
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to…