CVE-2011-2975

Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2011-08-01

Last modified

2024-09-16

Weaknesses

CWE-399

Affected products

• Mapserver (Osgeo)
• Mapserver (Umn)

References

• http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html
• http://trac.osgeo.org/mapserver/ticket/3939