CVE-2005-1393: Buffer Overflow

Published May 2, 2005

Updated

Multiple buffer overflows in ArcGIS for ESRI ArcInfo Workstation 9.0 allow local users to execute arbitrary code via long command line arguments to (1) asmaster, (2) asuser, (3) asutility, (4) se, or (5) asrecovery.

Affected Software

1 affected component

Esri ArcInfo Workstation=9.0

Remediation

Patch Available

http://www.digitalmunition.com/DMA%5B2005-0425a%5D.txt

Event History

May 2, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1393?

CVE-2005-1393 is classified as a high severity vulnerability due to its potential to allow local users to execute arbitrary code.

How do I fix CVE-2005-1393?

To fix CVE-2005-1393, users should upgrade to a patched version of ArcGIS that addresses the identified buffer overflow vulnerabilities.

Who is affected by CVE-2005-1393?

CVE-2005-1393 affects local users of ESRI ArcInfo Workstation version 9.0.

What type of vulnerability is CVE-2005-1393?

CVE-2005-1393 is a buffer overflow vulnerability that can be triggered by long command line arguments.

Can CVE-2005-1393 be exploited remotely?

CVE-2005-1393 cannot be exploited remotely as it requires local access to the affected software.