PT-2007-4941 · Ca · Ca Erwin Process Modeler

Published 2007-07-11 · Updated 2021-04-09 · CVE-2007-3695

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA ERwin Process Modeler version 7.1

Description The issue is related to a buffer overflow in LICRCMD.EXE, which allows attackers to execute arbitrary code via a long filename. However, it is noted that the filename would likely come from a trusted source, potentially limiting the impact of this issue.

Recommendations For CA ERwin Process Modeler version 7.1, consider restricting the use of long filenames to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2007-3695

Affected Products

Ca Erwin Process Modeler

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3695 · Security Note
• http://eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf · Vendor Advisory
• http://securityfocus.com/bid/24817 · Note
• http://osvdb.org/39597 · Note
• https://t.me/cvenotify/13005 · Telegram Post