CVE-2011-2975: Double Free
Published Aug 1, 2011
·Updated
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Affected Software
70 affected components
Umn Mapserver=5.6.4
Umn Mapserver=6.0.0-rc2
Umn Mapserver=6.0.0-beta3
Umn Mapserver=6.0.0-beta5
Umn Mapserver=6.0.0-rc1
Umn Mapserver=6.0.0-beta1
Umn Mapserver=5.2.2
Umn Mapserver=5.6.5
Umn Mapserver=5.6.7
Umn Mapserver=6.0.0-beta7
Umn Mapserver=6.0.0-beta6
Umn Mapserver=4.10.7
Umn Mapserver=5.6.6
Umn Mapserver=6.0.0-beta4
Umn Mapserver=5.2.3
Umn Mapserver=6.0.0-beta2
OSGeo MapServer=4.2.0-beta1
OSGeo MapServer=4.4.0-beta1
OSGeo MapServer=4.4.0-beta2
OSGeo MapServer=4.6.0-beta1
OSGeo MapServer=4.6.0-beta2
OSGeo MapServer=4.6.0-beta3
OSGeo MapServer=4.8.0-beta2
OSGeo MapServer=4.8.0-beta1
OSGeo MapServer=4.8.0-beta3
OSGeo MapServer=4.8.0-rc2
OSGeo MapServer=4.8.0-rc1
OSGeo MapServer=4.10.0
OSGeo MapServer=4.10.0-beta1
OSGeo MapServer=4.10.0-rc1
OSGeo MapServer=4.10.0-beta3
OSGeo MapServer=4.10.0-beta2
OSGeo MapServer=4.10.4
OSGeo MapServer=4.10.2
OSGeo MapServer=4.10.1
OSGeo MapServer=4.10.3
OSGeo MapServer=4.10.5
OSGeo MapServer=5.0.0-beta5
OSGeo MapServer=5.0.0-beta6
OSGeo MapServer=5.0.0-beta3
OSGeo MapServer=5.0.0-beta4
OSGeo MapServer=5.0.0-beta1
OSGeo MapServer=5.0.0-beta2
OSGeo MapServer=5.0.0-rc1
OSGeo MapServer=5.2.0
OSGeo MapServer=5.2.0-beta2
OSGeo MapServer=5.2.0-beta1
OSGeo MapServer=5.2.0-beta3
OSGeo MapServer=5.2.0-beta4
OSGeo MapServer=5.2.0-rc1
OSGeo MapServer=5.2.1
OSGeo MapServer=5.4.0
OSGeo MapServer=5.4.0-beta1
OSGeo MapServer=5.4.0-beta2
OSGeo MapServer=5.4.0-beta4
OSGeo MapServer=5.4.0-beta3
OSGeo MapServer=5.4.0-rc2
OSGeo MapServer=5.4.0-rc1
OSGeo MapServer=5.4.2
OSGeo MapServer=5.4.1
OSGeo MapServer=5.6.0
OSGeo MapServer=5.6.1
OSGeo MapServer=5.6.3
OSGeo MapServer=4.6.0
OSGeo MapServer=4.6.0-rc1
OSGeo MapServer<=6.0.0
OSGeo MapServer=5.0.0-rc2
OSGeo MapServer=5.0.0
OSGeo MapServer=4.4.0
OSGeo MapServer=4.4.0-beta3
Remediation
Patch Available
Event History
Aug 1, 2011
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-2975?
CVE-2011-2975 has a severity that may lead to application crash or denial of service.
2
How do I fix CVE-2011-2975?
To fix CVE-2011-2975, you should upgrade to MapServer version 6.0.1 or later.
3
Which versions of MapServer are affected by CVE-2011-2975?
CVE-2011-2975 affects MapServer versions 4.10.7 and lower, including multiple beta and release candidates prior to 6.0.1.
4
What type of vulnerability is CVE-2011-2975?
CVE-2011-2975 is a double free vulnerability that could be exploited by remote attackers.
5
What impact could an exploit of CVE-2011-2975 have?
Exploitation of CVE-2011-2975 could lead to application crashes and potentially other unspecified impacts.