CVE-2021-29094 ArcGIS Server image service and raster analytics security update: buffer overflow

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

CVE-2021-29093

Esri ArcGIS Server (10.8.1 and earlier) contains a use-after-free vulnerability in the parser for a specially crafted file, allowing an authenticated attacker with specialized permissions to execute arbitrary code in the service account. Affected product is Esri ArcGIS Server; root cause is a use...

CVE-2021-29093 ArcGIS Server image service and raster analytics security update: use-after-free

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

CVE-2021-29096

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 and earlier and ArcGIS Pro 2.7 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

Design/Logic Flaw

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 and earlier and ArcGIS Pro 2.7 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

CVE-2021-29096

The CVE-2021-29096 issue affects Esri ArcReader, ArcGIS Desktop/Engine (10.8.1 and earlier) and ArcGIS Pro (2.7 and earlier). It is a use-after-free in PMF file parsing that allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. In the described...

PT-2021-18086 · Esri · Arcgis Desktop +3

Name of the Vulnerable Software and Affected Versions: Esri ArcReader versions 10.8.1 and earlier ArcGIS Desktop versions 10.8.1 and earlier ArcGIS Engine versions 10.8.1 and earlier ArcGIS Pro versions 2.7 and earlier Description: The issue arises from multiple uninitialized pointer...

Esri ArcReader 资源管理错误漏洞

Esri ArcReader is an application from Esri, USA. A free, easy-to-use desktop mapping application. A security vulnerability exists in Esri ArcReader that allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user. No details of the vulnerability are...

Esri 多款产品缓冲区错误漏洞

ESRI ArcGIS Enterprise and others are products of Environmental Systems Research Institute ESRI, Inc.ArcGIS Enterprise is a GIS Geographic Information System base software system.Esri Arcgis Server is a Web-oriented enterprise software platform that can be used to provide geolocation services. Es...

Esri ArcGIS Server 缓冲区错误漏洞

Esri Arcgis Server is the United States Esri company's a Web-oriented can be used to provide geographic location services, enterprise-class software platform. A buffer overflow vulnerability exists in Esri ArcGIS Server 10.8.1 and earlier, which can be exploited by an attacker to achieve arbitrar...

CVE-2021-29096

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 and earlier and ArcGIS Pro 2.7 and earlier allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user...

CVE-2021-29094

Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 and earlier allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account...

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

Design/Logic Flaw

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

CVE-2020-35712

Esri ArcGIS Server before 10.8 is vulnerable to SSRF in some configurations...

CVE-2020-35712

CVE-2020-35712 affects Esri ArcGIS Server prior to version 10.8 and is described as a Server-Side Request Forgery (SSRF) in some configurations. The connected sources confirm the vulnerability and affected product, but do not provide exploitation status, affected subcomponents, specific versions ...

ESRI ArcGis Runtime SDK for Android Arbitrary Code Execution Vulnerability

ESRI ArcGis Runtime SDK for Android is a software development kit for building native mapping applications based on the Android platform. A security vulnerability exists in the ESRI ArcGis Runtime SDK for Android prior to version 10.2.6-2. The vulnerability can be exploited to execute arbitrary...

Code injection

The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

CVE-2015-2002

The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

CVE-2015-2002

The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...