Unscored severity · published Mar 30, 2007
CVE-2007-1770
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations,…
–
CVSS
17%
EPSS
No
On KEV
Description
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.
Exploitation
Is it being used?
Exploit prediction (EPSS)17.0% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AR
Arcsde · Esri
8.3; 8.3; 9.0; 9.0; 9.0; 9.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-1770
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-1770
Broken Link
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507
Broken Link
http://secunia.com/advisories/24639
Vendor Advisory
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260
Vendor Advisory
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261
Vendor Advisory
http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262
Broken Link
http://www.securityfocus.com/bid/23175
More from Arcsde
–
CVE-2007-4278
Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly…