Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-29117

arcreader use-after-free

Description

A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Esri ArcReader

  • All to < 10.8.2affected

References