Lucene search

K
cveMitreCVE-2007-3696
HistoryJul 11, 2007 - 10:30 p.m.

CVE-2007-3696

2007-07-1122:30:00
mitre
web.nvd.nist.gov
23
ca erwin data model validator
remote attackers
denial of service
.exp database file

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.018

Percentile

88.3%

CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (application hang) via a malformed .EXP database file and (2) cause a denial of service (aaplication crash) via a crafted .EXP database file, which triggers a NULL dereference.

Affected configurations

Nvd
Node
broadcomerwin_data_model_validator
VendorProductVersionCPE
broadcomerwin_data_model_validator*cpe:2.3:a:broadcom:erwin_data_model_validator:*:*:*:*:*:*:*:*

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

AI Score

6.6

Confidence

High

EPSS

0.018

Percentile

88.3%

Related for CVE-2007-3696