CVE-2007-1770

Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

16.84% chance of exploitation in the next 30 days, 97th percentile

Published

2007-03-30

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4146

Security advisories

• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaI…
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaI…
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaI…
• http://www.securityfocus.com/bid/23175
• http://www.securitytracker.com/id?1017874
• http://www.vupen.com/english/advisories/2007/1140
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33282
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33457

References

• CVE Record
• NVD entry