CVE-2021-29117

Esri ArcReader vulnerable in 10.8.1 and earlier due to a use-after-free in PMF file parsing, permitting arbitrary code execution in the user’s context. Exploitation requires the user to handle a crafted PMF (remote code execution possible, with user interaction). Affected versions are 10.8.1 and ...

CVE-2021-29112 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29112 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29112

CVE-2021-29112 affects Esri ArcReader 10.8.1 and earlier. The vulnerability is an out-of-bounds read during PMF file parsing that can disclose information to an unauthenticated attacker, under the context of the current user. Exploitation requires user interaction (per sources), and the issue is ...

CVE-2021-29118 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29118 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

CVE-2021-29118

CVE-2021-29118 — Esri ArcReader PMF parsing out-of-bounds read affects ArcReader 10.8.1 and earlier. The flaw is triggered while parsing PMF files, causing an information disclosure in the context of the current user. Some sources describe remote exploitation with user interaction required; other...

phpMyAdmin Denial of service (DOS) attack with dbase extension

An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

GHSA-426Q-975P-W5CR phpMyAdmin Denial of service (DOS) attack with dbase extension

An issue was discovered in phpMyAdmin where, under certain conditions, phpMyAdmin may not delete temporary files during the import of ESRI files. All 4.6.x versions prior to 4.6.4, 4.4.x versions prior to 4.4.15.8, and 4.0.x versions prior to 4.0.10.17 are affected...

Esri ArcGIS Enterprise Portal for ArcGIS组件XXE漏洞

Esri ArcGIS Enterprise is a GIS Geographic Information System base software system from the Environmental Systems Research Institute Esri, Inc. The system supports mapping and visualization, analysis, and data management, etc. An XXE vulnerability exists in the Esri ArcGIS Enterprise Portal for...

Fedora: Security Advisory for shapelib (FEDORA-2022-216f0a205a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for shapelib (FEDORA-2022-6746739d52)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: shapelib-1.5.0-12.fc36

The Shapefile C Library provides the ability to write simple C programs for reading, writing and updating to a limited extent ESRI Shapefiles, and the associated attribute file .dbf...

[SECURITY] Fedora 36 Update: shapelib-1.5.0-11.fc36

The Shapefile C Library provides the ability to write simple C programs for reading, writing and updating to a limited extent ESRI Shapefiles, and the associated attribute file .dbf...

Esri ArcReader 资源管理错误漏洞

Esri ArcReader is an application from Esri, USA. a free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that could allow a remote attacker to disclose sensitive information about an affected installation of Esri ArcReader. User interaction is required t...

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

Esri ArcReader 缓冲区错误漏洞

Esri ArcReader is an application from Esri, USA. a free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that could allow a remote attacker to disclose sensitive information about an affected installation of Esri ArcReader. User interaction is required t...

Esri ArcReader 缓冲区错误漏洞

Esri ArcReader is an application from Esri, USA. a free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that could allow a remote attacker to disclose sensitive information about an affected installation of Esri ArcReader. User interaction is required t...