CVE-2005-1394 Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) loc...
HighCVSS 7.2
EPSS 0.83%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| esri arcinfo workstation | = 9.0 | No fix listed |
References
- 20050430 DMA[2005-0425a] - 'ESRI ArcGIS 9.x multiple local vulnerabilities mailing-list third-party-advisory
- 15196 broken-link third-party-advisory
- 1013852 broken-link patch third-party-advisory vdb-entry vendor-advisory
- support.esri.com vendor-advisory
- www.digitalmunition.com patch third-party-advisory