CVE

Id
27635  
CVE No.
CVE-2007-4278  
Status
Candidate  
Description
Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow in an sprintf function call.  
Phase
Assigned (20070809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
284435 27635 CVE-2007-4278 IDEFENSE:20070815 ESRI ArcSDE Numeric Literal Buffer Overflow Vulnerability  View
284436 27635 CVE-2007-4278 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=577  View
284437 27635 CVE-2007-4278 CONFIRM:http://downloads.esri.com/support/downloads/other_/ArcSDE-92sp3-issues.htm  View
284438 27635 CVE-2007-4278 BID:25334  View
284439 27635 CVE-2007-4278 URL:http://www.securityfocus.com/bid/25334  View
284440 27635 CVE-2007-4278 VUPEN:ADV-2007-2911  View
284441 27635 CVE-2007-4278 URL:http://www.vupen.com/english/advisories/2007/2911  View
284442 27635 CVE-2007-4278 SECTRACK:1018574  View
284443 27635 CVE-2007-4278 URL:http://securitytracker.com/id?1018574  View
284444 27635 CVE-2007-4278 SECUNIA:26452  View
284445 27635 CVE-2007-4278 URL:http://secunia.com/advisories/26452  View
284446 27635 CVE-2007-4278 XF:esri-arcsde-numeric-bo(36042)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53799 JVNDB-2007-002491 Asterisk Open Source の Skinny チャネルドライバにおけるサービス運用妨害 (DoS) の脆弱性 Asterisk Open Source、AsteriskNOW、Appliance Developer Kit、および Appliance s800i の Skinny チャネルドライバ (chan_skinny) には、サービス運用妨害 (アプリケーションクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-4280 27635 3.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002491.html  View