Lucene search
K

13 matches found

Cvelist
Cvelist
added 2022/08/12 6:40 p.m.10 views

CVE-2021-29112 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

3.3CVSS5.5AI score0.00072EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/08/12 6:40 p.m.10 views

CVE-2021-29118 Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

An out-of-bounds read vulnerability exists when parsing a specially crafted file in Esri ArcReader 10.8.1 and earlier which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user...

3.3CVSS5.5AI score0.00072EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.35 views

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score0.00049EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2022/01/31 12:0 a.m.22 views

Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score0.00072EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/11/30 12:0 a.m.16 views

(0Day) Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/05/06 12:0 a.m.13 views

(0Day) Esri ArcReader PMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing...

3.3CVSS3.2AI score
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.34 views

Esri ArcReader PMF File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.6AI score0.00278EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.32 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.00441EPSS
Exploits0References1
NCSC
NCSC
added 2021/03/30 12:0 a.m.2 views

Vulnerabilities fixed in Esri ArcReader

Esri has fixed multiple vulnerabilities in ArcReader, ArcGIS Desktop, ArcGIS Engine and ArcGIS Pro. A malicious party could vulnerabilities potentially exploit them to execute arbitrary code execute arbitrary code under application privileges. To do so, the malicious party needs to induce an...

7.8CVSS7.9AI score0.00456EPSS
Exploits0
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.29 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.00441EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.28 views

Esri ArcReader PMF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS5.7AI score0.00441EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.27 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.00456EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2021/03/30 12:0 a.m.32 views

Esri ArcReader PMF File Parsing Uninitialized Pointer Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Esri ArcReader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PMF...

7.8CVSS6.2AI score0.00456EPSS
Exploits0References1
Rows per page
Query Builder