← CVE Intelligence

CVE-2021-29093

ArcGIS Server image service and raster analytics security update: use-after-free PUBLISHED

Description (CNA)

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account.

Affected (CNA)

Vendor / productVersions
Esri / ArcGIS Serveraffected All through 10.9

CWE

CWE-416

References

ADP enrichment

CVE

No English description supplied.