Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
2011-08-01T20:55:01.273
2025-04-11T00:51:21.963
Deferred
CVSSv2: 6.8 (MEDIUM)
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.6
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | osgeo | mapserver | ≤ 6.0.0 | Yes |
| Application | osgeo | mapserver | 4.2.0 | Yes |
| Application | osgeo | mapserver | 4.4.0 | Yes |
| Application | osgeo | mapserver | 4.4.0 | Yes |
| Application | osgeo | mapserver | 4.4.0 | Yes |
| Application | osgeo | mapserver | 4.4.0 | Yes |
| Application | osgeo | mapserver | 4.6.0 | Yes |
| Application | osgeo | mapserver | 4.6.0 | Yes |
| Application | osgeo | mapserver | 4.6.0 | Yes |
| Application | osgeo | mapserver | 4.6.0 | Yes |
| Application | osgeo | mapserver | 4.6.0 | Yes |
| Application | osgeo | mapserver | 4.8.0 | Yes |
| Application | osgeo | mapserver | 4.8.0 | Yes |
| Application | osgeo | mapserver | 4.8.0 | Yes |
| Application | osgeo | mapserver | 4.8.0 | Yes |
| Application | osgeo | mapserver | 4.8.0 | Yes |
| Application | osgeo | mapserver | 4.10.0 | Yes |
| Application | osgeo | mapserver | 4.10.0 | Yes |
| Application | osgeo | mapserver | 4.10.0 | Yes |
| Application | osgeo | mapserver | 4.10.0 | Yes |
| Application | osgeo | mapserver | 4.10.0 | Yes |
| Application | osgeo | mapserver | 4.10.1 | Yes |
| Application | osgeo | mapserver | 4.10.2 | Yes |
| Application | osgeo | mapserver | 4.10.3 | Yes |
| Application | osgeo | mapserver | 4.10.4 | Yes |
| Application | osgeo | mapserver | 4.10.5 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.0.0 | Yes |
| Application | osgeo | mapserver | 5.2.0 | Yes |
| Application | osgeo | mapserver | 5.2.0 | Yes |
| Application | osgeo | mapserver | 5.2.0 | Yes |
| Application | osgeo | mapserver | 5.2.0 | Yes |
| Application | osgeo | mapserver | 5.2.0 | Yes |
| Application | osgeo | mapserver | 5.2.0 | Yes |
| Application | osgeo | mapserver | 5.2.1 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.0 | Yes |
| Application | osgeo | mapserver | 5.4.1 | Yes |
| Application | osgeo | mapserver | 5.4.2 | Yes |
| Application | osgeo | mapserver | 5.6.0 | Yes |
| Application | osgeo | mapserver | 5.6.1 | Yes |
| Application | osgeo | mapserver | 5.6.3 | Yes |
| Application | umn | mapserver | 4.10.7 | Yes |
| Application | umn | mapserver | 5.2.2 | Yes |
| Application | umn | mapserver | 5.2.3 | Yes |
| Application | umn | mapserver | 5.6.4 | Yes |
| Application | umn | mapserver | 5.6.5 | Yes |
| Application | umn | mapserver | 5.6.6 | Yes |
| Application | umn | mapserver | 5.6.7 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |
| Application | umn | mapserver | 6.0.0 | Yes |