CVE-2007-4629

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

3.49%

Published

Aug 31, 2007

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.

Weaknesses (CWE)

CWE-119

Affected Products (1)

university_of_minnesota · mapservervulnerable

References (20)

http://mapserver.gis.umn.edu/download/current/HISTORY.TXT/

Patch

http://secunia.com/advisories/26561

http://secunia.com/advisories/26718

http://secunia.com/advisories/29688

http://securityreason.com/securityalert/3082

http://trac.osgeo.org/mapserver/ticket/2252

http://www.debian.org/security/2008/dsa-1539

http://www.securityfocus.com/bid/25582

http://www.vupen.com/english/advisories/2007/2974

https://bugzilla.redhat.com/show_bug.cgi?id=272081

https://www.redhat.com/archives/fedora-package-announce/2007-September/msg00096.html