medium6.8Public exploit code
CVE-2011-2975
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MapServer 6.0 - '.Map' File Double-Free Remote Denial of Service2011-08-30 · dos · windows · Verified
Impact
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Osgeo | Mapserver | through 6.0.0 Versions 4.2.0, 4.4.0, 4.6.0, 4.8.0, 4.10.0 |
| Umn | Mapserver | Versions 4.10.7, 5.2.2, 5.2.3, 5.6.4, 5.6.5, 5.6.6 |