CVE-2009-0839: Buffer Overflow
Published Mar 31, 2009
·Updated
Stack-based buffer overflow in mapserv.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2, when the server has a map with a long IMAGEPATH or NAME attribute, allows remote attackers to execute arbitrary code via a crafted id parameter in a query action.
Affected Software
42 affected components
OSGeo MapServer=4.2.0-beta1
OSGeo MapServer=4.4.0
OSGeo MapServer=4.4.0-beta1
OSGeo MapServer=4.4.0-beta2
OSGeo MapServer=4.4.0-beta3
OSGeo MapServer=4.6.0
OSGeo MapServer=4.6.0-beta1
OSGeo MapServer=4.6.0-beta2
OSGeo MapServer=4.6.0-beta3
OSGeo MapServer=4.6.0-rc1
OSGeo MapServer=4.8.0-beta1
OSGeo MapServer=4.8.0-beta2
OSGeo MapServer=4.8.0-beta3
OSGeo MapServer=4.8.0-rc1
OSGeo MapServer=4.8.0-rc2
OSGeo MapServer=4.10.0
OSGeo MapServer=4.10.0-beta1
OSGeo MapServer=4.10.0-beta2
OSGeo MapServer=4.10.0-beta3
OSGeo MapServer=4.10.0-rc1
OSGeo MapServer=4.10.1
OSGeo MapServer=4.10.2
OSGeo MapServer=4.10.3
OSGeo MapServer=5.0.0
OSGeo MapServer=5.0.0-beta1
OSGeo MapServer=5.0.0-beta2
OSGeo MapServer=5.0.0-beta3
OSGeo MapServer=5.0.0-beta4
OSGeo MapServer=5.0.0-beta5
OSGeo MapServer=5.0.0-beta6
OSGeo MapServer=5.0.0-rc1
OSGeo MapServer=5.0.0-rc2
OSGeo MapServer=5.2.0
OSGeo MapServer=5.2.0-beta1
OSGeo MapServer=5.2.0-beta2
OSGeo MapServer=5.2.0-beta3
OSGeo MapServer=5.2.0-beta4
OSGeo MapServer=5.2.0-rc1
OSGeo MapServer=5.2.1
Umn Mapserver=4.0
Umn Mapserver=4.0-beta1
Umn Mapserver=4.0-beta2
Event History
Mar 31, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
via NVD·06:24 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0839?
CVE-2009-0839 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2009-0839?
To fix CVE-2009-0839, upgrade to MapServer version 4.10.4 or 5.2.2 or later.
3
What are the affected versions for CVE-2009-0839?
CVE-2009-0839 affects MapServer versions prior to 4.10.4 and 5.2.2.
4
Can CVE-2009-0839 be exploited remotely?
Yes, CVE-2009-0839 can be exploited remotely by attackers via crafted requests.
5
What kind of vulnerability is CVE-2009-0839?
CVE-2009-0839 is categorized as a stack-based buffer overflow vulnerability.