CVE-2005-1394

Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.

CVSS v2.0

7.2 HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.83% chance of exploitation in the next 30 days, 55th percentile

Published

2005-05-02

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/972

References

• CVE Record
• NVD entry

Related

• CVE-2005-1393
• CVE-2005-1396
• CVE-2005-1384
• CVE-2005-1398
• CVE-2005-1383
• CVE-2005-1401