CVE-2010-2539

2010-08-0222:00:00

CWE-119

[email protected]

web.nvd.nist.gov

mapserv

buffer overflow

denial of service

cve-2010-2539

nvd

6.1 Medium

AI Score

Confidence

Low

2.1 Low

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.

CPENameOperatorVersion
umn:mapserverumn mapservereq4.0
osgeo:mapserverosgeo mapservereq4.2.0
osgeo:mapserverosgeo mapservereq4.4.0
osgeo:mapserverosgeo mapservereq4.6.0
osgeo:mapserverosgeo mapservereq4.8.0
osgeo:mapserverosgeo mapservereq4.10.0
osgeo:mapserverosgeo mapservereq4.10.4
osgeo:mapserverosgeo mapservereq4.10.2
osgeo:mapserverosgeo mapservereq4.10.1
osgeo:mapserverosgeo mapservereq4.10.3

CPE	Name	Operator	Version
umn:mapserver	umn mapserver	eq	4.0
osgeo:mapserver	osgeo mapserver	eq	4.2.0
osgeo:mapserver	osgeo mapserver	eq	4.4.0
osgeo:mapserver	osgeo mapserver	eq	4.6.0
osgeo:mapserver	osgeo mapserver	eq	4.8.0
osgeo:mapserver	osgeo mapserver	eq	4.10.0
osgeo:mapserver	osgeo mapserver	eq	4.10.4
osgeo:mapserver	osgeo mapserver	eq	4.10.2
osgeo:mapserver	osgeo mapserver	eq	4.10.1
osgeo:mapserver	osgeo mapserver	eq	4.10.3