ESRI ArcMap Arbitrary Code Execution

Description: Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a user before executing embedded VBA. Mxd files are not filtered by email systems so this allows a remote...

ESRI ArcGIS 10.0.x ArcMap 9 - Arbitrary Code Execution

ESRI ArcGIS 10.0.x ArcMap 9 - Arbitrary Code Execution ===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This...

ESRI ArcGIS 10.0.x / ArcMap 9 - Arbitrary Code Execution

===== TITLE ===== ESRI ArcMap Arbitrary Code Execution Via Crafted Map File ============ Description: ============ Opening a specially crafted mxd file will execute arbitrary code without prompting and without a crash of the application. This is due to a flaw in the programs ability to prompt a...