7.5
CVSSv2

CVE-2011-2704

Published: 01/08/2011 Updated: 07/06/2021
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in MapServer prior to 4.10.7 and 5.x prior to 5.6.7 allows remote malicious users to execute arbitrary code via vectors related to OGC filter encoding.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

osgeo mapserver 4.10.0

osgeo mapserver 4.10.2

osgeo mapserver 4.8.0

osgeo mapserver 4.4.0

osgeo mapserver 4.6.0

osgeo mapserver 4.10.5

osgeo mapserver 4.10.4

osgeo mapserver 4.2.0

osgeo mapserver

osgeo mapserver 4.10.3

osgeo mapserver 4.10.1

osgeo mapserver 5.2.0

osgeo mapserver 5.0.0

osgeo mapserver 5.4.2

osgeo mapserver 5.4.0

osgeo mapserver 5.6.0

umn mapserver 5.2.3

osgeo mapserver 5.2.1

osgeo mapserver 5.4.1

umn mapserver 5.6.4

umn mapserver 5.6.5

umn mapserver 5.6.6

umn mapserver 5.2.2

osgeo mapserver 5.6.1

osgeo mapserver 5.6.3

Vendor Advisories

Several vulnerabilities have been discovered in mapserver, a CGI-based web framework to publish spatial data and interactive mapping applications The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2011-2703 Several instances of insufficient escaping of user input, leading to SQL injection attacks via OGC f ...