CVE-2021-29096 Vulnerability Details

  /     /     /  

CVE-2021-29096 Metadata Quick Info

CVE Published: 25/03/2021 | CVE Updated: 17/09/2024 | CVE Year: 2021
Source: Esri | Vendor: Esri | Product: ArcReader
Status : PUBLISHED

---

CVE-2021-29096 Description

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-416
CWE Name: CWE-416 Use After Free
Source: Esri

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).