CVE-2007-4542

MEDIO 4.3CVE-2007-4542 · Published 27/08/2007 · updated 16/06/2026

En resumen

CVE-2007-4542 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a mapserver (university of minnesota).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.6%, mayor que el 75.9% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
mapserver university_of_minnesota	`≤ 4.10.3`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.

References

bugs.debian.org/cgi-bin/bugreport.cgi
mapserver.gis.umn.edu/download/current/HISTORY.TXT
secunia.com/advisories/26561 · Patch
secunia.com/advisories/26718
secunia.com/advisories/29688
trac.osgeo.org/mapserver/attachment/ticket/2256/ms-bug-2256-4.8.patch
trac.osgeo.org/mapserver/ticket/2256
debian.org/security/2008/dsa-1539
securityfocus.com/bid/25582
vupen.com/english/advisories/2007/2974
redhat.com/archives/fedora-package-announce/2007-September/msg00096.html

Más vulnerabilidades de mapserver

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free