Lucene search
+L

67 matches found

Vulnrichment
Vulnrichment
added 2022/08/12 6:40 p.m.7 views

CVE-2021-29118 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

3.3CVSS6.4AI score0.00334EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/12 6:40 p.m.68 views

CVE-2021-29118

CVE-2021-29118 — Esri ArcReader PMF parsing out-of-bounds read affects ArcReader 10.8.1 and earlier. The flaw is triggered while parsing PMF files, causing an information disclosure in the context of the current user. Some sources describe remote exploitation with user interaction required; other...

5.5CVSS4.3AI score0.00334EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/12 6:40 p.m.17 views

CVE-2021-29118 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

3.3CVSS5.5AI score0.00334EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/01/31 12:0 a.m.9 views

PT-2022-9908 · Esri · Esri Arcreader

Name of the Vulnerable Software and Affected Versions: Esri ArcReader versions 10.8.1 and earlier Description: An out-of-bounds read issue exists when parsing a specially crafted file, allowing an unauthenticated attacker to induce an information disclosure issue in the context of the current use...

5.5CVSS3.8AI score0.00334EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2022/01/31 12:0 a.m.9 views

PT-2022-9910 · Esri · Esri Arcreader

Name of the Vulnerable Software and Affected Versions: Esri ArcReader versions 10.8.1 and earlier Description: An out-of-bounds read issue exists when parsing a specially crafted file, allowing an unauthenticated attacker to induce an information disclosure issue in the context of the current use...

5.5CVSS3.8AI score0.00334EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.27 views

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score0.00334EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.39 views

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score0.004EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/31 12:0 a.m.8 views

Esri ArcReader 缓冲区错误漏洞

Esri ArcReader is an application from Esri, USA. a free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that could allow a remote attacker to disclose sensitive information about an affected installation of Esri ArcReader. User interaction is required t...

5.5CVSS5.2AI score0.00334EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/01/31 12:0 a.m.8 views

Esri ArcReader 资源管理错误漏洞

Esri ArcReader is an application from Esri, USA. a free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that could allow a remote attacker to disclose sensitive information about an affected installation of Esri ArcReader. User interaction is required t...

7.8CVSS7AI score0.004EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.28 views

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score0.00334EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2022/01/31 12:0 a.m.7 views

Esri ArcReader 缓冲区错误漏洞

Esri ArcReader is an application from Esri, USA. a free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that could allow a remote attacker to disclose sensitive information about an affected installation of Esri ArcReader. User interaction is required t...

5.5CVSS5.2AI score0.00334EPSS
SaveExploits0References3
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.11 views

(0Day) Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.19 views

(0Day) Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/05/06 12:0 a.m.13 views

(0Day) Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS2.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/05/06 12:0 a.m.14 views

(0Day) Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS2.8AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/05/06 12:0 a.m.17 views

(0Day) Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/05/06 12:0 a.m.15 views

(0Day) Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score
SaveExploits0
NCSC
NCSC
added 2021/03/30 12:0 a.m.57 views

Vulnerabilities fixed in Esri ArcReader

Esri has fixed multiple vulnerabilities in ArcReader, ArcGIS Desktop, ArcGIS Engine and ArcGIS Pro. A malicious party could vulnerabilities potentially exploit them to execute arbitrary code execute arbitrary code under application privileges. To do so, the malicious party needs to induce an...

7.8CVSS7.9AI score0.02412EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.34 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.01952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.32 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Rows per page
Query Builder