CVE-2012-1661

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

ESRI ArcMap code execution

MXD files may contain VBS scripts...

CVE-2012-1661 - ESRI ArcMap arbitrary code execution via crafted map file.

Description: Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a user before executing embedded VBA. Mxd files are not filtered by email systems so this allows a remote...

ESRI ArcMap Arbitrary Code Execution

Description: Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a user before executing embedded VBA. Mxd files are not filtered by email systems so this allows a remote...

ESRI ArcGIS 10.0.x ArcMap 9 - Arbitrary Code Execution

ESRI ArcGIS 10.0.x ArcMap 9 - Arbitrary Code Execution ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This...

ESRI ArcGIS 10.0.X / ArcMap 9 Arbitrary Code Execution

Exploit for windows platform in category local exploits ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. Thi...

ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution

===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a...

NIIT Technologies GIS subsidiary's server hacked by Tigers of Indian Cyber (TIC)

NIIT Technologies GIS subsidiary's server hacked by Tigers of Indian Cyber TIC A server belonging to NIIT GIS Limited, an NIIT Technologies subsidiary, was compromised last week using a SQL injection attack by a hacking group calling itself the 'Tigers of Indian Cyber' TIC. TIC posted the...

Solaris 10.x ESRI Arcgis Local Root Format String Exploit

No description provided by source. / ESRI 9.x Arcgis local root format string exploit Copyright Kevin Finisterre and John H. Bug found by Kevin Finisterre [email protected] Exploit by John H. [email protected] We overwrite the thrjmptable Tested on solaris 10 / include dlfcn.h includ...

ESRI ArcSDE database server buffer overflow

Buffer overflow on oversied TCP/5151 port request...

CVE-2007-4278

Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow i...

Stack overflow

Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow i...

CVE-2007-4278

The CVE-2007-4278 issue affects ESRI ArcSDE service 9.2 (ArcGIS) and is caused by a stack-based buffer overflow in the giomgr component when handling numeric ASCII representations overflow a static 8-byte buffer, leading to potential denial of service and possibly arbitrary code execution. Docume...

CVE-2007-4278

Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow i...

esri-overflow.txt

/ Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow...

ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit

No description provided by source. / Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9...

ESRI ArcSDE 9.0 9.2sp1 - Remote Buffer Overflow

ESRI ArcSDE 9.0 9.2sp1 - Remote Buffer Overflow / Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit :...

ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================= ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow Exploit ======================================================= / Dreatica-FXP crew ---------------------------------------- Target : ES...

ESRI ArcSDE 9.0 < 9.2sp1 - Remote Buffer Overflow

/ Dreatica-FXP crew ---------------------------------------- Target : ESRI ArcSDE 9.0 - 9.2sp1 Site : http://www.esri.com Found by : iDefense, http://labs.idefense.com/intelligence/vulnerabilities/ ---------------------------------------- Exploit : ESRI ArcSDE 9.0 - 9.2sp1 Remote Buffer Overflow...

iDefense Security Advisory 04.04.07: ESRI ArcSDE Buffer Overflow Vulnerability

ESRI ArcSDE Buffer Overflow Vulnerability iDefense Security Advisory 04.04.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 04, 2007 I. BACKGROUND Environmental Systems Research Institute ESRI ArcSDE is a multi-user database server that has been bundled with ArcGIS to provide access ...