CVE-2007-5435 - Unspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 might

CVE-2007-5435

Summary

Unspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2 might allow user-assisted remote attackers to cause a denial of service via a crafted Data Standards File (Datatype Standards File).

References

http://osvdb.org/43483
http://securityreason.com/securityalert/3219
http://www.eleytt.com/advisories/eleytt_ERWINDSF.pdf
http://www.securityfocus.com/archive/1/482021/100/0/threaded
http://www.securityfocus.com/bid/26007

Vulnerable Configurations

cpe:2.3:a:broadcom:erwin_process_modeler:7.2:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:erwin_process_modeler:7.2:*:*:*:*:*:*:*

CVSS

Base:	4.3 (as of 09-04-2021 - 13:52)
Impact:
Exploitability:

CWE

CWE-399

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	MEDIUM	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:M/Au:N/C:N/I:N/A:P

refmap via4

bid	26007
bugtraq	20071010 [ELEYTT] 10PAZDZIERNIK2007
misc	http://www.eleytt.com/advisories/eleytt_ERWINDSF.pdf
osvdb	43483
sreason	3219

Last major update

09-04-2021 - 13:52

Published

13-10-2007 - 01:17

Last modified

09-04-2021 - 13:52