CVE-2010-2539

MapServer < 4.10.6 and 5.x < 5.6.4 - Denial of Service via msTmpFile Buffer Overflow

Title source: llm
STIX 2.1

Description

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/60851
Issue Tracking x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=617312
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41855
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127973754121922&w=2
Mailing List mailing-list x_refsource_mlist
http://marc.info/?l=oss-security&m=127973381215859&w=2

Scores

EPSS 0.0032
EPSS Percentile 24.2%

Details

CWE
CWE-119
Status published
Products (16)
osgeo/mapserver 4.2.0 beta1
osgeo/mapserver 4.4.0 (4 CPE variants)
osgeo/mapserver 4.6.0 (5 CPE variants)
osgeo/mapserver 4.8.0 beta1 (5 CPE variants)
osgeo/mapserver 4.10.0 (5 CPE variants)
osgeo/mapserver 4.10.1
osgeo/mapserver 4.10.2
osgeo/mapserver 4.10.3
osgeo/mapserver 4.10.4
osgeo/mapserver 5.0.0 (9 CPE variants)
... and 6 more
Published Aug 02, 2010
Tracked Since Feb 18, 2026