CVE-2011-2975

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-08-01 · updated 2026-06-16
Weakness: CWE-399

Description

Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.

Affected products

MapServer: through 6.0.0; 4.2.0-beta1, 4.4.0, 4.4.0-beta1, 4.4.0-beta2, 4.4.0-beta3, 4.6.0 (+47)
Umn Mapserver: 4.10.7, 5.2.2, 5.2.3, 5.6.4, 5.6.5, 5.6.6 (+10)

References

http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html
http://trac.osgeo.org/mapserver/ticket/3939
http://lists.osgeo.org/pipermail/mapserver-users/2011-July/069430.html
http://trac.osgeo.org/mapserver/ticket/3939

Get alerted when CVE-2011-2975 or the next vulnerability affects your stack