CVEvulnerability
CVE-2010-2539
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2010-08-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-119
Description
Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.
Affected configurations
• osgeo mapserver (<= 4.10.5)
• osgeo mapserver 4.2.0
• osgeo mapserver 4.4.0
• osgeo mapserver 4.6.0
• osgeo mapserver 4.8.0
• osgeo mapserver 4.10.0
• osgeo mapserver 4.10.1
• osgeo mapserver 4.10.2
• osgeo mapserver 4.10.3
• osgeo mapserver 4.10.4
• umn mapserver 4.0
• osgeo mapserver (<= 5.6.3)
• osgeo mapserver 5.0.0
• osgeo mapserver 5.2.0
• osgeo mapserver 5.2.1
• osgeo mapserver 5.4.0
• osgeo mapserver 5.4.1
• osgeo mapserver 5.4.2
• osgeo mapserver 5.6.0
• osgeo mapserver 5.6.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://lists.osgeo.org/pipermail/mapserver-users/2010-July/066052.html Patch
- http://marc.info/?l=oss-security&m=127973381215859&w=2 marc.info
- http://marc.info/?l=oss-security&m=127973754121922&w=2 marc.info
- http://trac.osgeo.org/mapserver/ticket/3484 Patch
- http://www.securityfocus.com/bid/41855 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=617312 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60851 exchange.xforce.ibmcloud.com
- http://lists.osgeo.org/pipermail/mapserver-users/2010-July/066052.html Patch
- http://marc.info/?l=oss-security&m=127973381215859&w=2 marc.info
- http://marc.info/?l=oss-security&m=127973754121922&w=2 marc.info
- http://trac.osgeo.org/mapserver/ticket/3484 Patch
- http://www.securityfocus.com/bid/41855 www.securityfocus.com
- https://bugzilla.redhat.com/show_bug.cgi?id=617312 bugzilla.redhat.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60851 exchange.xforce.ibmcloud.com