{"VID":4460,"Platforms":["Windows"],"Vendor":"ESRI","WinAPI":0,"WinUpdateID":0,"ProductID":0,"Impersonate":0,"References":{"Source":"ESRI","Vulnerability identifier":"bcbad11d-a5f8-490a-ae40-089acb216ca3","Title":"Security Vulnerabilities fixed in ArcGIS ArcReader 10.8.2","Reference Page":"https://www.esri.com/arcgis-blog/products/arcgis-desktop/administration/arcreader-general-data-frame-security-update/","Encoded Reference Page":"https%3A%2F%2Fwww.esri.com%2Farcgis-blog%2Fproducts%2Farcgis-desktop%2Fadministration%2Farcreader-general-data-frame-security-update%2F","Summary":"An out-of-bounds read and write, also use after free vulnerabilities exists when parsing a specially crafted file in Esri ArcReader 10.8.1 (and earlier) which allow an unauthenticated attacker to induce an information disclosure issue in the context of the current user.","Impact":"The vulnerabilities in the following products could cause the system to become vulnerable to malicious security attack: ArcGIS ArcReader","Products":["ArcGIS ArcReader"],"Release Date":"2022-08-12","CVSS Score":"7.8","Severity":"High","Category":"Applications","CVES":{"Base":"http://cve.mitre.org/cgi-bin/cvename.cgi?name=","CVE List":["CVE-2021-29112","CVE-2021-29117","CVE-2021-29118"]}},"DetectedProducts":[{"Product":"ArcGIS ArcReader 10.6.1","Product Path":"C:\\Program Files (x86)\\ArcGIS\\ArcReader10.6\\","Detected Version":"10.6.9270","Icon":"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"}],"Installation":{"1":{"Mode":"manual","manual":"https://www.esri.com/en-us/arcgis/products/index"}}}