CVEvulnerability
CVE-2011-2975
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-08-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-399
Description
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Affected configurations
• osgeo mapserver (<= 6.0.0)
• osgeo mapserver 4.2.0
• osgeo mapserver 4.4.0
• osgeo mapserver 4.6.0
• osgeo mapserver 4.8.0
• osgeo mapserver 4.10.0
• osgeo mapserver 4.10.1
• osgeo mapserver 4.10.2
• osgeo mapserver 4.10.3
• osgeo mapserver 4.10.4
• osgeo mapserver 4.10.5
• osgeo mapserver 5.0.0
• osgeo mapserver 5.2.0
• osgeo mapserver 5.2.1
• osgeo mapserver 5.4.0
• osgeo mapserver 5.4.1
• osgeo mapserver 5.4.2
• osgeo mapserver 5.6.0
• osgeo mapserver 5.6.1
• osgeo mapserver 5.6.3
• umn mapserver 4.10.7
• umn mapserver 5.2.2
• umn mapserver 5.2.3
• umn mapserver 5.6.4
• umn mapserver 5.6.5
• umn mapserver 5.6.6
• umn mapserver 5.6.7
• umn mapserver 6.0.0