CVE-2011-2975
published 2011-08-01CVE-2011-2975: Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service…
PriorityP431medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
4.60%
90.5th percentile
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Affected
33 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mapserver | < mapserver 6.0.1-1 (bookworm) | mapserver 6.0.1-1 (bookworm) |
| osgeo | mapserver | <= 6.0.0 | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | — | — |
| osgeo | mapserver | >= 0 < 6.0.1-1 | 6.0.1-1 |
| osgeo | mapserver | >= 0 < 6.0.1-1 | 6.0.1-1 |
| osgeo | mapserver | >= 0 < 6.0.1-1 | 6.0.1-1 |
| osgeo | mapserver | >= 0 < 6.0.1-1 | 6.0.1-1 |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
vendor_debian6.8MEDIUM
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-4j4j-v2rr-2rgh: Double free vulnerability in the msAddImageSymbol function in mapsymbol
ghsa_unreviewed·2022-05-13
CVE-2011-2975 [MEDIUM] GHSA-4j4j-v2rr-2rgh: Double free vulnerability in the msAddImageSymbol function in mapsymbol
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
OSV
CVE-2011-2975: Double free vulnerability in the msAddImageSymbol function in mapsymbol
osv·2011-08-01·CVSS 6.8
CVE-2011-2975 [MEDIUM] CVE-2011-2975: Double free vulnerability in the msAddImageSymbol function in mapsymbol
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Debian
CVE-2011-2975: mapserver - Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in Map...
vendor_debian·2011·CVSS 6.8
CVE-2011-2975 [MEDIUM] CVE-2011-2975: mapserver - Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in Map...
Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Scope: local
bookworm: resolved (fixed in 6.0.1-1)
bullseye: resolved (fixed in 6.0.1-1)
forky: resolved (fixed in 6.0.1-1)
sid: resolved (fixed in 6.0.1-1)
trixie: resolved (fixed in 6.0.1-1)
No detection rules found.
2011-08-01
Published