CVE-2021-29100

A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS...

CVE-2021-29100

The CVE-2021-29100 issue affects Esri ArcGIS Earth 1.11.0 and earlier, due to a path traversal flaw in how input is processed (notably during file handling, including KMZ parsing). This allows an attacker to create arbitrary files and, under the user’s security context, potentially achieve arbitr...

CVE-2021-29100 ArcGIS Earth has a File Parsing Directory Traversal Vulnerability

A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS...