Vulnerability Details CVE-2021-29117
A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.9%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2021-29117
-
cpe:2.3:a:esri:arcreader:-
-
cpe:2.3:a:esri:arcreader:10.3
-
cpe:2.3:a:esri:arcreader:10.4
-
cpe:2.3:a:esri:arcreader:10.5
-
cpe:2.3:a:esri:arcreader:10.6
-
cpe:2.3:a:esri:arcreader:10.7
-
cpe:2.3:a:esri:arcreader:10.8
-
cpe:2.3:a:esri:arcreader:10.8.1