CVE-2007-1770

Name of the Vulnerable Software and Affected Versions: ArcGIS versions prior to 9.2 Service Pack 2

Description: The issue allows remote attackers to cause a denial of service and execute arbitrary code via long parameters in crafted requests, specifically when using three tiered ArcSDE configurations. This is due to a buffer overflow in the ArcSDE service.

Recommendations: For versions prior to 9.2 Service Pack 2, update to 9.2 Service Pack 2 or later to resolve the issue. As a temporary workaround, consider restricting access to the ArcSDE service to minimize the risk of exploitation.