Description


Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.

Related CPE's


Weaknesses



CWE-120


CWE-120

CVSS impact metrics


CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

6.8 · Medium

Information


Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-03-25T20:15:13.277Z

5 years ago

Last modified

2024-11-21T05:00:42.177Z

1 year ago