CVE-2005-1394

Description

Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.

Weakness classification

• CWE-134: Use of Externally-Controlled Format String

Primary references

• cve@mitre.org — Mailing List, Third Party Advisory
• cve@mitre.org — Broken Link
• cve@mitre.org — Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• cve@mitre.org — Vendor Advisory
• cve@mitre.org — Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link
• af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Patch, Third Party Advisory, VDB Entry, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory