Computer Associates ERwin Data Model Validator Multiple Denial Of Service Vulnerabilities
BID:24814
Info
Computer Associates ERwin Data Model Validator Multiple Denial Of Service Vulnerabilities
| Bugtraq ID: | 24814 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2007-3696 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 09 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | Michal Bucko (sapheal) is credited with the discovery of this vulnerability. |
| Vulnerable: |
Computer Associates ERwin Data Model Validator 0 |
| Not Vulnerable: | |
Discussion
Computer Associates ERwin Data Model Validator Multiple Denial Of Service Vulnerabilities
Computer Associates ERwin Data Model Validator is prone to multiple denial-of-service vulnerabilities because the software fails to handle specially crafted '.EXP' database files. These issues include a NULL-pointer dereference vulnerability and a denial-of-service vulnerability.
An attacker can exploit these issues to cause a denial-of-service condition. Arbitrary code execution may be possible for the NULL-pointer dereference issue, but this has not been confirmed.
Computer Associates ERwin Data Model Validator is prone to multiple denial-of-service vulnerabilities because the software fails to handle specially crafted '.EXP' database files. These issues include a NULL-pointer dereference vulnerability and a denial-of-service vulnerability.
An attacker can exploit these issues to cause a denial-of-service condition. Arbitrary code execution may be possible for the NULL-pointer dereference issue, but this has not been confirmed.
Exploit / POC
Computer Associates ERwin Data Model Validator Multiple Denial Of Service Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Computer Associates ERwin Data Model Validator Multiple Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Computer Associates ERwin Data Model Validator Multiple Denial Of Service Vulnerabilities
References:
References:
- CA ERwin Data Model Validator Home Page (Computer Associates)
- AllFusion Data Model Validator Multiple Vulnerabilities (Michal Bucko)