CVE-2007-1770

Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.

• CWE-120

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507Broken Link
• http://secunia.com/advisories/24639Broken Link
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260Vendor Advisory
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261Vendor Advisory
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262Vendor Advisory
• http://www.securityfocus.com/bid/23175Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1017874Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/1140Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33282Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33457Third Party Advisory, VDB Entry
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=507Broken Link
• http://secunia.com/advisories/24639Broken Link
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1260Vendor Advisory
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1261Vendor Advisory
• http://support.esri.com/index.cfm?fa=downloads.patchesServicePacks.viewPatch&PID=19&MetaID=1262Vendor Advisory
• http://www.securityfocus.com/bid/23175Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1017874Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/1140Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33282Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33457Third Party Advisory, VDB Entry

Published

Mar 30, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1764Stack-based buffer overflow in FastStone Image Viewer 2.8 al…
• CVE-2007-1765Unspecified vulnerability in Microsoft Windows 2000 SP4 thro…
• CVE-2007-1766PHP remote file inclusion vulnerability in login/engine/db/p…
• CVE-2007-1767Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar…
• CVE-2007-1768Cross-site scripting (XSS) vulnerability in app/helpers/appl…
• CVE-2007-1769Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-1771PHP remote file inclusion vulnerability in manage/javascript…
• CVE-2007-1772The FTP service in HP JetDirect print servers allows remote …
• CVE-2007-1773Multiple directory traversal vulnerabilities in aBitWhizzy a…
• CVE-2007-1774Multiple cross-site scripting (XSS) vulnerabilities in aBitW…
• CVE-2007-1775Unrestricted file upload vulnerability in upload.php3 in JBr…
• CVE-2007-1776SQL injection vulnerability in index.php in the DesignForJoo…