VULNERABILITY INTELLIGENCE
CVE-2007-3696
CVSS score7.8 HIGH
EPSS probability1.70%
CISA KEVNot currently listed
Published2007-07-11
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C
Description
CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (application hang) via a malformed .EXP database file and (2) cause a denial of service (aaplication crash) via a crafted .EXP database file, which triggers a NULL dereference.