CVE-2011-2704: Buffer Overflow
Published Aug 1, 2011
·Updated
Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.
Affected Software
59 affected components
OSGeo MapServer=4.2.0-beta1
OSGeo MapServer=4.4.0-beta1
OSGeo MapServer=4.4.0-beta2
OSGeo MapServer=4.6.0-beta1
OSGeo MapServer=4.6.0-beta2
OSGeo MapServer=4.6.0-beta3
OSGeo MapServer=4.8.0-beta2
OSGeo MapServer=4.8.0-beta1
OSGeo MapServer=4.8.0-beta3
OSGeo MapServer=4.8.0-rc2
OSGeo MapServer=4.8.0-rc1
OSGeo MapServer=4.10.0
OSGeo MapServer=4.10.0-beta1
OSGeo MapServer=4.10.0-rc1
OSGeo MapServer=4.10.0-beta3
OSGeo MapServer=4.10.0-beta2
OSGeo MapServer=4.10.4
OSGeo MapServer=4.10.2
OSGeo MapServer=4.10.1
OSGeo MapServer=4.10.3
OSGeo MapServer=4.10.5
OSGeo MapServer=4.6.0
OSGeo MapServer=4.6.0-rc1
OSGeo MapServer<=4.10.6
OSGeo MapServer=4.4.0
OSGeo MapServer=4.4.0-beta3
Umn Mapserver=5.6.4
Umn Mapserver=5.2.2
Umn Mapserver=5.6.5
Umn Mapserver=5.6.6
Umn Mapserver=5.2.3
OSGeo MapServer=5.0.0-beta5
OSGeo MapServer=5.0.0-beta6
OSGeo MapServer=5.0.0-beta3
OSGeo MapServer=5.0.0-beta4
OSGeo MapServer=5.0.0-beta1
OSGeo MapServer=5.0.0-beta2
OSGeo MapServer=5.0.0-rc1
OSGeo MapServer=5.2.0
OSGeo MapServer=5.2.0-beta2
OSGeo MapServer=5.2.0-beta1
OSGeo MapServer=5.2.0-beta3
OSGeo MapServer=5.2.0-beta4
OSGeo MapServer=5.2.0-rc1
OSGeo MapServer=5.2.1
OSGeo MapServer=5.4.0
OSGeo MapServer=5.4.0-beta1
OSGeo MapServer=5.4.0-beta2
OSGeo MapServer=5.4.0-beta4
OSGeo MapServer=5.4.0-beta3
OSGeo MapServer=5.4.0-rc2
OSGeo MapServer=5.4.0-rc1
OSGeo MapServer=5.4.2
OSGeo MapServer=5.4.1
OSGeo MapServer=5.6.0
OSGeo MapServer=5.6.1
OSGeo MapServer=5.6.3
OSGeo MapServer=5.0.0-rc2
OSGeo MapServer=5.0.0
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Aug 1, 2011
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2704?
CVE-2011-2704 has a high severity rating due to its potential for remote code execution.
2
How do I fix CVE-2011-2704?
To resolve CVE-2011-2704, upgrade MapServer to version 4.10.7 or 5.6.7 and later.
3
What versions of MapServer are affected by CVE-2011-2704?
CVE-2011-2704 affects MapServer versions prior to 4.10.7 and 5.x prior to 5.6.7.
4
What type of vulnerability is CVE-2011-2704?
CVE-2011-2704 is a stack-based buffer overflow vulnerability.
5
Can CVE-2011-2704 be exploited by unauthorized users?
Yes, CVE-2011-2704 can be exploited by remote attackers to execute arbitrary code.