CVE-2011-2704

Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.

Score

CVSS 2.0 7.5 High

Status

Modified - secalert@redhat.com

Published

2011-08-01

Last modified

2024-08-06

Weaknesses

CWE-119

Affected products

• Mapserver (Osgeo)
• Mapserver (Umn)

References

• http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html
• http://secunia.com/advisories/45257
• http://secunia.com/advisories/45368
• http://trac.osgeo.org/mapserver/ticket/3903
• http://www.debian.org/security/2011/dsa-2285
• http://www.openwall.com/lists/oss-security/2011/07/19/14
• http://www.openwall.com/lists/oss-security/2011/07/20/15
• http://www.securityfocus.com/bid/48720
• https://bugzilla.redhat.com/show_bug.cgi?id=723293
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68719