CVE-2007-3695

{"id": "CVE-2007-3695", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-07-11T22:30:00.000", "references": [{"url": "http://osvdb.org/39597", "source": "cve@mitre.org"}, {"url": "http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/24817", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/39597", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.eleytt.com/advisories/eleytt_ALLFUSIONLICRCMD.pdf", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/24817", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary code via a long filename. NOTE: the researcher does not suggest any circumstances in which the filename would come from an untrusted source, and therefore perhaps the issue does not cross privilege boundaries and should not be included in CVE."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en LICRCMD.EXE in CA ERwin Process Modeler (anteriormente llamado AllFusion Process Modeler) 7.1 permite a atacantes ejecutar c\u00f3digo de su elecci\u00f3n mediante un nombre de fichero largo.\r\nNOTA: El investigador no sugiere ninguna circunstancia en la cual el nombre del fichero podr\u00eda proceder de una fuente no fiable, y por tanto quiz\u00e1s este asunto no cruza fronteras de privilegios y no debiera estar incluido en CVE."}], "lastModified": "2024-11-21T00:33:50.790", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:broadcom:erwin_process_modeler:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE18FE31-5230-4517-B06A-28697BD108D3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}