CVE-2007-4278

Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow in an sprintf function call.

• CWE-787

• http://downloads.esri.com/support/downloads/other_/ArcSDE-92sp3-issues.htmVendor Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=577Broken Link
• http://secunia.com/advisories/26452Broken Link
• http://securitytracker.com/id?1018574Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/25334Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/2911Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36042Third Party Advisory, VDB Entry
• http://downloads.esri.com/support/downloads/other_/ArcSDE-92sp3-issues.htmVendor Advisory
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=577Broken Link
• http://secunia.com/advisories/26452Broken Link
• http://securitytracker.com/id?1018574Broken Link, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/25334Broken Link, Third Party Advisory, VDB Entry
• http://www.vupen.com/english/advisories/2007/2911Broken Link, Third Party Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36042Third Party Advisory, VDB Entry

Published

Aug 15, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4272Multiple vulnerabilities in IBM DB2 UDB 8 before Fixpak 15 a…
• CVE-2007-4273IBM DB2 UDB 8 before Fixpak 15 and 9.1 before Fixpak 3 allow…
• CVE-2007-4274Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-4275Multiple untrusted search path vulnerabilities in IBM DB2 UD…
• CVE-2007-4276Stack-based buffer overflow in IBM DB2 UDB 8 before Fixpak 1…
• CVE-2007-4277The Trend Micro AntiVirus scan engine before 8.550-1001, as …
• CVE-2007-4279PHP remote file inclusion vulnerability in config.php in Fro…
• CVE-2007-4280The Skinny channel driver (chan_skinny) in Asterisk Open Sou…
• CVE-2007-4281Cross-site scripting (XSS) vulnerability in KnowledgeTree Op…
• CVE-2007-4282The "Extended properties for entries" (entryproperties) plug…
• CVE-2007-4283PHP remote file inclusion vulnerability in bridge/yabbse.inc…
• CVE-2007-4284Multiple cross-site scripting (XSS) vulnerabilities in Cisco…