Description
Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.
References
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
6.8 · Medium
Information
Source identifier
Vulnerability status
Modified
Published
2021-03-25T20:15:13.357Z
4 years agoLast modified
2024-11-21T05:00:42.303Z
1 year ago