CVE-2007-3696

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-07-11 · updated 2026-06-16

Description

CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (application hang) via a malformed .EXP database file and (2) cause a denial of service (aaplication crash) via a crafted .EXP database file, which triggers a NULL dereference.

Affected products

Broadcom Erwin Data Model Validator: all versions

References

http://osvdb.org/39596
http://www.eleytt.com/advisories/eleytt_ALLFUSIONDATAMODEL.pdf
http://www.securityfocus.com/bid/24814
http://osvdb.org/39596
http://www.eleytt.com/advisories/eleytt_ALLFUSIONDATAMODEL.pdf
http://www.securityfocus.com/bid/24814

Get alerted when CVE-2007-3696 or the next vulnerability affects your stack