CVE-2011-2975 Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified ot...
MediumCVSS 6.8
EPSS 4.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/mapserver(Debian:12) | < 6.0.1-1 | 6.0.1-1 |
| debian/mapserver(Debian:13) | < 6.0.1-1 | 6.0.1-1 |
| debian/mapserver(Debian:14) | < 6.0.1-1 | 6.0.1-1 |
| osgeo mapserver | <= 6.0.0 | No fix listed |
| osgeo mapserver | = 4.2.0-beta1 | No fix listed |
| osgeo mapserver | = 4.4.0 | No fix listed |
| osgeo mapserver | = 4.4.0-beta1 | No fix listed |
| osgeo mapserver | = 4.4.0-beta2 | No fix listed |
| osgeo mapserver | = 4.4.0-beta3 | No fix listed |
| osgeo mapserver | = 4.6.0 | No fix listed |
| osgeo mapserver | = 4.6.0-beta1 | No fix listed |
| osgeo mapserver | = 4.6.0-beta2 | No fix listed |
| osgeo mapserver | = 4.6.0-beta3 | No fix listed |
| osgeo mapserver | = 4.6.0-rc1 | No fix listed |
| osgeo mapserver | = 4.8.0-beta1 | No fix listed |
| osgeo mapserver | = 4.8.0-beta2 | No fix listed |
| osgeo mapserver | = 4.8.0-beta3 | No fix listed |
| osgeo mapserver | = 4.8.0-rc1 | No fix listed |
| osgeo mapserver | = 4.8.0-rc2 | No fix listed |
| osgeo mapserver | = 4.10.0 | No fix listed |
| osgeo mapserver | = 4.10.0-beta1 | No fix listed |
| osgeo mapserver | = 4.10.0-beta2 | No fix listed |
| osgeo mapserver | = 4.10.0-beta3 | No fix listed |
| osgeo mapserver | = 4.10.0-rc1 | No fix listed |
| osgeo mapserver | = 4.10.1 | No fix listed |
Show 48 more
| Product | Affected versions | Fixed in |
|---|---|---|
| osgeo mapserver | = 4.10.2 | No fix listed |
| osgeo mapserver | = 4.10.3 | No fix listed |
| osgeo mapserver | = 4.10.4 | No fix listed |
| osgeo mapserver | = 4.10.5 | No fix listed |
| osgeo mapserver | = 5.0.0 | No fix listed |
| osgeo mapserver | = 5.0.0-beta1 | No fix listed |
| osgeo mapserver | = 5.0.0-beta2 | No fix listed |
| osgeo mapserver | = 5.0.0-beta3 | No fix listed |
| osgeo mapserver | = 5.0.0-beta4 | No fix listed |
| osgeo mapserver | = 5.0.0-beta5 | No fix listed |
| osgeo mapserver | = 5.0.0-beta6 | No fix listed |
| osgeo mapserver | = 5.0.0-rc1 | No fix listed |
| osgeo mapserver | = 5.0.0-rc2 | No fix listed |
| osgeo mapserver | = 5.2.0 | No fix listed |
| osgeo mapserver | = 5.2.0-beta1 | No fix listed |
| osgeo mapserver | = 5.2.0-beta2 | No fix listed |
| osgeo mapserver | = 5.2.0-beta3 | No fix listed |
| osgeo mapserver | = 5.2.0-beta4 | No fix listed |
| osgeo mapserver | = 5.2.0-rc1 | No fix listed |
| osgeo mapserver | = 5.2.1 | No fix listed |
| osgeo mapserver | = 5.4.0 | No fix listed |
| osgeo mapserver | = 5.4.0-beta1 | No fix listed |
| osgeo mapserver | = 5.4.0-beta2 | No fix listed |
| osgeo mapserver | = 5.4.0-beta3 | No fix listed |
| osgeo mapserver | = 5.4.0-beta4 | No fix listed |
| osgeo mapserver | = 5.4.0-rc1 | No fix listed |
| osgeo mapserver | = 5.4.0-rc2 | No fix listed |
| osgeo mapserver | = 5.4.1 | No fix listed |
| osgeo mapserver | = 5.4.2 | No fix listed |
| osgeo mapserver | = 5.6.0 | No fix listed |
| osgeo mapserver | = 5.6.1 | No fix listed |
| osgeo mapserver | = 5.6.3 | No fix listed |
| umn mapserver | = 4.10.7 | No fix listed |
| umn mapserver | = 5.2.2 | No fix listed |
| umn mapserver | = 5.2.3 | No fix listed |
| umn mapserver | = 5.6.4 | No fix listed |
| umn mapserver | = 5.6.5 | No fix listed |
| umn mapserver | = 5.6.6 | No fix listed |
| umn mapserver | = 5.6.7 | No fix listed |
| umn mapserver | = 6.0.0-beta1 | No fix listed |
| umn mapserver | = 6.0.0-beta2 | No fix listed |
| umn mapserver | = 6.0.0-beta3 | No fix listed |
| umn mapserver | = 6.0.0-beta4 | No fix listed |
| umn mapserver | = 6.0.0-beta5 | No fix listed |
| umn mapserver | = 6.0.0-beta6 | No fix listed |
| umn mapserver | = 6.0.0-beta7 | No fix listed |
| umn mapserver | = 6.0.0-rc1 | No fix listed |
| umn mapserver | = 6.0.0-rc2 | No fix listed |
References
- Debian Security Tracker CVE-2011-2975 vendor-advisory
- [mapserver-users] 20110713 MapServer 6.0.1, 5.6.7 and 4.10.7 releases with security fixes mailing-list patch
- trac.osgeo.org patch