Lucene search
+L

1018 matches found

Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.35 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.01952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.35 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.42 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.46 views

Esri ArcReader PMF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.49 views

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score0.01522EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.36 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
NCSC
NCSC
added 2021/03/30 12:00 a.m.59 views

Vulnerabilities fixed in Esri ArcReader

Esri has fixed multiple vulnerabilities in ArcReader, ArcGIS Desktop, ArcGIS Engine and ArcGIS Pro. A malicious party could vulnerabilities potentially exploit them to execute arbitrary code execute arbitrary code under application privileges. To do so, the malicious party needs to induce an...

7.8CVSS7.9AI score0.02412EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.36 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.01952EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.31 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.43 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.42 views

Esri ArcReader PMF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:00 a.m.33 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.02412EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/29 12:00 a.m.33 views

Buffer Overflow Vulnerability in Various Esri Products (CNVD-2021-39523)

ESRI ArcGIS Enterprise and others are products of Environmental Systems Research Institute ESRI, Inc.ArcGIS Enterprise is a GIS Geographic Information System base software system.Esri Arcgis Server is a Web-oriented enterprise software platform that can be used to provide geolocation services. Es...

7.8CVSS7.8AI score0.02412EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/29 12:00 a.m.13 views

Esri ArcReader Resource Management Error Vulnerability

Esri ArcReader is an application from Esri, USA. A free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. No details of the vulnerability are...

7.8CVSS7.7AI score0.01522EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/29 12:00 a.m.8 views

Buffer Overflow Vulnerabilities in Various Esri Products

ESRI ArcGIS Enterprise and so on are the products of the U.S. Environmental Systems Research Institute ESRI, Inc. ArcGIS Enterprise is a set of GIS geographic information system basic software system. Esri Arcgis Server and so on are the products of the U.S. Esri Esri, Inc. Server is a Web-orient...

7.8CVSS7.6AI score0.01952EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/26 12:00 a.m.11 views

Esri ArcGIS Server Buffer Overflow Vulnerability (CNVD-2021-25717)

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A buffer overflow vulnerability exists in Esri ArcGIS...

6.8CVSS7.7AI score0.01002EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/26 12:00 a.m.29 views

Esri ArcGIS Server Reuse After Release Vulnerability

ArcGIS Server is the back-end server software component of ArcGIS Enterprise from Esri that makes your geographic information available to others in your organization, and optionally makes it available to anyone with an Internet connection. A post-release reuse vulnerability exists in Esri ArcGIS...

6.8CVSS7.3AI score0.00948EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/03/26 12:00 a.m.28 views

Esri ArcGIS Server Buffer Overflow Vulnerability

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A buffer overflow vulnerability exists in Esri ArcGIS Server 10.8.1 and earlier, which can be exploited by an attacker to achieve arbitrar...

6.8CVSS7.9AI score0.00883EPSS
SaveExploits0References1
OSV
OSV
added 2021/03/25 9:15 p.m.6 views

CVE-2021-29095

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

6.8CVSS7AI score0.00883EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/25 9:15 p.m.30 views

CVE-2021-29098

Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 and earlier and ArcGIS Pro 2.7 and earlier allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

7.8CVSS0.01952EPSS
SaveExploits0References4
Rows per page
Query Builder