Unscored severity · published May 3, 2005
CVE-2005-1394
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to…
–
CVSS
0.8%
EPSS
No
On KEV
Description
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AW
Arcinfo Workstation · Esri
9.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1394
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1394
Mailing List
http://marc.info/?l=full-disclosure&m=111489411524630&w=2
Broken Link
http://secunia.com/advisories/15196
Broken Link
http://securitytracker.com/id?1013852
Vendor Advisory
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=14&MetaID=1015
Patch
http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt
More from Arcinfo Workstation
–
CVE-2005-1393
Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3)…