VULNERABILITY INTELLIGENCE
CVE-2007-1770
CVSS score10 HIGH
EPSS probability16.84%
CISA KEVNot currently listed
Published2007-03-30
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.
Weakness classification
- CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Broken Link
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link, Third Party Advisory, VDB Entry
- cve@mitre.org — Broken Link, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link