CVE-2007-4542

MITTEL 4.3CVE-2007-4542 · Published 27/08/2007 · updated 16/06/2026

Kurz gesagt

CVE-2007-4542 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in mapserver (university of minnesota).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.6%, höher als bei 75.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
mapserver university_of_minnesota	`≤ 4.10.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.

References

bugs.debian.org/cgi-bin/bugreport.cgi
mapserver.gis.umn.edu/download/current/HISTORY.TXT
secunia.com/advisories/26561 · Patch
secunia.com/advisories/26718
secunia.com/advisories/29688
trac.osgeo.org/mapserver/attachment/ticket/2256/ms-bug-2256-4.8.patch
trac.osgeo.org/mapserver/ticket/2256
debian.org/security/2008/dsa-1539
securityfocus.com/bid/25582
vupen.com/english/advisories/2007/2974
redhat.com/archives/fedora-package-announce/2007-September/msg00096.html

Weitere Schwachstellen in mapserver

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free