CVE-2007-3695: Buffer Overflow

Published Jul 11, 2007

Updated

Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename. NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source, and therefore perhaps the issue does not cross privilege boundaries and should not be included in CVE.

Affected Software

1 affected component

Broadcom Erwin Process Modeler=7.1

Event History

Jul 11, 2007

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3695?

CVE-2007-3695 is classified as a high-severity vulnerability due to its potential to allow arbitrary code execution.

How do I fix CVE-2007-3695?

To fix CVE-2007-3695, upgrade CA ERwin Process Modeler to a version that is not affected by this vulnerability.

What systems are affected by CVE-2007-3695?

CVE-2007-3695 affects CA ERwin Process Modeler version 7.1.

What kind of attack can be executed using CVE-2007-3695?

An attacker can exploit CVE-2007-3695 to execute arbitrary code through a specially crafted long filename.

Is CVE-2007-3695 exploitable remotely?

CVE-2007-3695 may not be exploitable remotely as the vulnerability involves local filename handling.