CVE-2021-29093

Esri ArcGIS Server (10.8.1 and earlier) contains a use-after-free vulnerability in the parser for a specially crafted file, allowing an authenticated attacker with specialized permissions to execute arbitrary code in the service account. Affected product is Esri ArcGIS Server; root cause is a use...

CVE-2021-29093 ArcGIS Server image service and raster analytics security update: use-after-free

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...