CVE-2009-1176
CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 does not ensure that the string holding the id parameter ends in a '\0' character, which allows remote attackers to conduct buffer-overflow attacks or have unspecified other impact via a long id parameter in a query action.
Affected Platforms (CPE)
📦
Osgeo
Mapserver
= 4.2.0📦
Osgeo
Mapserver
= 4.4.0📦
Osgeo
Mapserver
= 4.4.0📦
Osgeo
Mapserver
= 4.4.0📦
Osgeo
Mapserver
= 4.4.0📦
Osgeo
Mapserver
= 4.6.0📦
Osgeo
Mapserver
= 4.6.0📦
Osgeo
Mapserver
= 4.6.0📦
Osgeo
Mapserver
= 4.6.0📦
Osgeo
Mapserver
= 4.6.0📦
Osgeo
Mapserver
= 4.8.0📦
Osgeo
Mapserver
= 4.8.0📦
Osgeo
Mapserver
= 4.8.0📦
Osgeo
Mapserver
= 4.8.0📦
Osgeo
Mapserver
= 4.8.0📦
Osgeo
Mapserver
= 4.10.0📦
Osgeo
Mapserver
= 4.10.0📦
Osgeo
Mapserver
= 4.10.0📦
Osgeo
Mapserver
= 4.10.0📦
Osgeo
Mapserver
= 4.10.0📦
Osgeo
Mapserver
= 4.10.1📦
Osgeo
Mapserver
= 4.10.2📦
Osgeo
Mapserver
= 4.10.3📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.0.0📦
Osgeo
Mapserver
= 5.2.0📦
Osgeo
Mapserver
= 5.2.0📦
Osgeo
Mapserver
= 5.2.0📦
Osgeo
Mapserver
= 5.2.0📦
Osgeo
Mapserver
= 5.2.0📦
Osgeo
Mapserver
= 5.2.0📦
Osgeo
Mapserver
= 5.2.1📦
Umn
Mapserver
= 4.0📦
Umn
Mapserver
= 4.0📦
Umn