CVE-2010-1678

HIGH

Mapserver 5.2-5.6 < 5.6.5-2 - Improper Input Validation in Mapfile Symbol Index Parsing

Title source: llm
STIX 2.1

Description

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_misc
https://security-tracker.debian.org/tracker/CVE-2010-1678
Third Party Advisory x_refsource_confirm
https://trac.osgeo.org/mapserver/ticket/3641

Scores

CVSS v3 7.5
EPSS 0.0217
EPSS Percentile 80.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-20
Status published
Products (3)
osgeo/mapserver 5.2.0
osgeo/mapserver 5.4.0
osgeo/mapserver 5.6.0 - 5.6.5.-2
Published Oct 29, 2019
Tracked Since Feb 18, 2026