Esri Arcsde vulnerabilities

CVE-2007-1770 [CRITICAL] CWE-120 CVE-2007-1770: Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) Ar Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when using three tiered ArcSDE configurations, allows remote attackers to cause a denial of service (giomgr crash) and execute arbitrary code via long parameters in crafted requests.

CVE-2007-4278 [HIGH] CWE-787 CVE-2007-4278: Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, a Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large number that requires more than 8 bytes to represent in ASCII, which triggers the overflow in an sprintf function call.