CVE-2009-1177: Buffer Overflow

Published Mar 31, 2009

Updated

Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors.

Affected Software

42 affected components

OSGeo MapServer=4.2.0-beta1

OSGeo MapServer=4.4.0

OSGeo MapServer=4.4.0-beta1

OSGeo MapServer=4.4.0-beta2

OSGeo MapServer=4.4.0-beta3

OSGeo MapServer=4.6.0

OSGeo MapServer=4.6.0-beta1

OSGeo MapServer=4.6.0-beta2

OSGeo MapServer=4.6.0-beta3

OSGeo MapServer=4.6.0-rc1

OSGeo MapServer=4.8.0-beta1

OSGeo MapServer=4.8.0-beta2

OSGeo MapServer=4.8.0-beta3

OSGeo MapServer=4.8.0-rc1

OSGeo MapServer=4.8.0-rc2

OSGeo MapServer=4.10.0

OSGeo MapServer=4.10.0-beta1

OSGeo MapServer=4.10.0-beta2

OSGeo MapServer=4.10.0-beta3

OSGeo MapServer=4.10.0-rc1

OSGeo MapServer=4.10.1

OSGeo MapServer=4.10.2

OSGeo MapServer=4.10.3

OSGeo MapServer=5.0.0

OSGeo MapServer=5.0.0-beta1

OSGeo MapServer=5.0.0-beta2

OSGeo MapServer=5.0.0-beta3

OSGeo MapServer=5.0.0-beta4

OSGeo MapServer=5.0.0-beta5

OSGeo MapServer=5.0.0-beta6

OSGeo MapServer=5.0.0-rc1

OSGeo MapServer=5.0.0-rc2

OSGeo MapServer=5.2.0

OSGeo MapServer=5.2.0-beta1

OSGeo MapServer=5.2.0-beta2

OSGeo MapServer=5.2.0-beta3

OSGeo MapServer=5.2.0-beta4

OSGeo MapServer=5.2.0-rc1

OSGeo MapServer=5.2.1

Umn Mapserver=4.0

Umn Mapserver=4.0-beta1

Umn Mapserver=4.0-beta2

Remediation

Patch Available

http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html

Event History

Mar 31, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

via NVD·06:24 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1177?

The severity of CVE-2009-1177 is classified as high due to multiple stack-based buffer overflows that can potentially allow remote attackers to exploit the vulnerability.

How do I fix CVE-2009-1177?

To fix CVE-2009-1177, update MapServer to version 4.10.4 or higher, or 5.2.2 or higher.

What software versions are affected by CVE-2009-1177?

CVE-2009-1177 affects MapServer versions prior to 4.10.4 and 5.2.2, including various beta and release candidates.

Can CVE-2009-1177 be exploited remotely?

Yes, CVE-2009-1177 can be exploited through remote attack vectors due to the nature of the buffer overflow vulnerabilities.

What impact does CVE-2009-1177 have on systems?

The impact of CVE-2009-1177 is currently unknown but includes the potential for arbitrary code execution or denial of service on affected systems.