PT-2007-4941 · Ca · Ca Erwin Process Modeler

Publicado 2007-07-11 · Atualizado 2021-04-09 · CVE-2007-3695

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA ERwin Process Modeler version 7.1

Description The issue is related to a buffer overflow in LICRCMD.EXE, which allows attackers to execute arbitrary code via a long filename. However, it is noted that the filename would likely come from a trusted source, potentially limiting the impact of this issue.

Recommendations For CA ERwin Process Modeler version 7.1, consider restricting the use of long filenames to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2007-3695

Produtos afetados

Ca Erwin Process Modeler

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3695 · Nota de Segurança
• http://securityfocus.com/bid/24817 · Nota
• http://eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf · Aviso do Fabricante
• http://osvdb.org/39597 · Nota
• https://t.me/cvenotify/13005 · Publicação no Telegram