Format String Vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0

Format String Vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0

CVE-2005-1394 · HIGH Severity

AV:L/AC:L/AU:N/C:C/I:C/A:C

Format string vulnerability in ArcGIS for ESRI ArcInfo Workstation 9.0 allows local users to gain privileges via format string specifiers in the ARCHOME environment variable to (1) wservice or (2) lockmgr.

Learn more about our User Device Pen Test.