Lucene search

K
cve[email protected]CVE-2011-2975
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-2975

2022-10-0316:15:17
CWE-399
web.nvd.nist.gov
24
2
cve-2011-2975
vulnerability
msaddimagesymbol
mapserver
denial of service
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.5%

Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.

Affected configurations

NVD
Node
osgeomapserverRange6.0.0
OR
osgeomapserverMatch4.2.0beta1
OR
osgeomapserverMatch4.4.0
OR
osgeomapserverMatch4.4.0beta1
OR
osgeomapserverMatch4.4.0beta2
OR
osgeomapserverMatch4.4.0beta3
OR
osgeomapserverMatch4.6.0
OR
osgeomapserverMatch4.6.0beta1
OR
osgeomapserverMatch4.6.0beta2
OR
osgeomapserverMatch4.6.0beta3
OR
osgeomapserverMatch4.6.0rc1
OR
osgeomapserverMatch4.8.0beta1
OR
osgeomapserverMatch4.8.0beta2
OR
osgeomapserverMatch4.8.0beta3
OR
osgeomapserverMatch4.8.0rc1
OR
osgeomapserverMatch4.8.0rc2
OR
osgeomapserverMatch4.10.0
OR
osgeomapserverMatch4.10.0beta1
OR
osgeomapserverMatch4.10.0beta2
OR
osgeomapserverMatch4.10.0beta3
OR
osgeomapserverMatch4.10.0rc1
OR
osgeomapserverMatch4.10.1
OR
osgeomapserverMatch4.10.2
OR
osgeomapserverMatch4.10.3
OR
osgeomapserverMatch4.10.4
OR
osgeomapserverMatch4.10.5
OR
osgeomapserverMatch5.0.0
OR
osgeomapserverMatch5.0.0beta1
OR
osgeomapserverMatch5.0.0beta2
OR
osgeomapserverMatch5.0.0beta3
OR
osgeomapserverMatch5.0.0beta4
OR
osgeomapserverMatch5.0.0beta5
OR
osgeomapserverMatch5.0.0beta6
OR
osgeomapserverMatch5.0.0rc1
OR
osgeomapserverMatch5.0.0rc2
OR
osgeomapserverMatch5.2.0
OR
osgeomapserverMatch5.2.0beta1
OR
osgeomapserverMatch5.2.0beta2
OR
osgeomapserverMatch5.2.0beta3
OR
osgeomapserverMatch5.2.0beta4
OR
osgeomapserverMatch5.2.0rc1
OR
osgeomapserverMatch5.2.1
OR
osgeomapserverMatch5.4.0
OR
osgeomapserverMatch5.4.0beta1
OR
osgeomapserverMatch5.4.0beta2
OR
osgeomapserverMatch5.4.0beta3
OR
osgeomapserverMatch5.4.0beta4
OR
osgeomapserverMatch5.4.0rc1
OR
osgeomapserverMatch5.4.0rc2
OR
osgeomapserverMatch5.4.1
OR
osgeomapserverMatch5.4.2
OR
osgeomapserverMatch5.6.0
OR
osgeomapserverMatch5.6.1
OR
osgeomapserverMatch5.6.3
OR
umnmapserverMatch4.10.7
OR
umnmapserverMatch5.2.2
OR
umnmapserverMatch5.2.3
OR
umnmapserverMatch5.6.4
OR
umnmapserverMatch5.6.5
OR
umnmapserverMatch5.6.6
OR
umnmapserverMatch5.6.7
OR
umnmapserverMatch6.0.0beta1
OR
umnmapserverMatch6.0.0beta2
OR
umnmapserverMatch6.0.0beta3
OR
umnmapserverMatch6.0.0beta4
OR
umnmapserverMatch6.0.0beta5
OR
umnmapserverMatch6.0.0beta6
OR
umnmapserverMatch6.0.0beta7
OR
umnmapserverMatch6.0.0rc1
OR
umnmapserverMatch6.0.0rc2

Social References

More

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.5%