What’s Vulnerable › Vulnerabilities

CVE-2010-1678

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-29 · updated 2026-06-16
• Weakness: CWE-20

Description

Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing.

Affected products

• MapServer: from 5.6.0 before 5.6.5.-2; 5.2.0, 5.4.0 — fixed in 5.6.5.-2

How to fix

Upgrade to a fixed version: MapServer 5.6.5.-2. Check the vendor advisory for mitigations.

References

• https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-1678.html
• https://security-tracker.debian.org/tracker/CVE-2010-1678
• https://trac.osgeo.org/mapserver/ticket/3641
• https://people.canonical.com/~ubuntu-security/cve/2010/CVE-2010-1678.html
• https://security-tracker.debian.org/tracker/CVE-2010-1678
• https://trac.osgeo.org/mapserver/ticket/3641

Get alerted when CVE-2010-1678 or the next vulnerability affects your stack