Lucene search

K
OsgeoMapserver4.10.4

7 matches found

CVE
CVE
added 2010/08/02 10:0 p.m.63 views

CVE-2010-2540

mapserv.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 does not properly restrict the use of CGI command-line arguments that were intended for debugging, which allows remote attackers to have an unspecified impact via crafted arguments.

10CVSS6.6AI score0.05738EPSS
CVE
CVE
added 2009/10/23 6:30 p.m.58 views

CVE-2009-2281

Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow t...

10CVSS7.8AI score0.11504EPSS
CVE
CVE
added 2010/08/02 10:0 p.m.53 views

CVE-2010-2539

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.

2.1CVSS6.1AI score0.00063EPSS
CVE
CVE
added 2011/08/01 7:55 p.m.52 views

CVE-2011-2704

Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.

7.5CVSS8AI score0.06405EPSS
CVE
CVE
added 2011/08/01 7:55 p.m.51 views

CVE-2011-2703

Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via vectors related to (1) OGC filter encoding or (2) WMS time support.

7.5CVSS8.4AI score0.01573EPSS
CVE
CVE
added 2014/01/05 8:55 p.m.43 views

CVE-2013-7262

SQL injection vulnerability in the msPostGISLayerSetTimeFilter function in mappostgis.c in MapServer before 6.4.1, when a WMS-Time service is used, allows remote attackers to execute arbitrary SQL commands via a crafted string in a PostGIS TIME filter.

6.8CVSS8.2AI score0.0025EPSS
CVE
CVE
added 2011/08/01 8:55 p.m.36 views

CVE-2011-2975

Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.

6.8CVSS7.3AI score0.02808EPSS