Double free vulnerability in the msAddImageSymbol function in mapsymbol.c in MapServer before 6.0.1 might allow remote attackers to cause a denial of service (application crash) or have unspecified other impact via crafted mapfile data.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mapserver | Osgeo | * | 6.0.0 (including) |
| Mapserver | Osgeo | 4.2.0-beta1 (including) | 4.2.0-beta1 (including) |
| Mapserver | Osgeo | 4.4.0 (including) | 4.4.0 (including) |
| Mapserver | Osgeo | 4.4.0-beta1 (including) | 4.4.0-beta1 (including) |
| Mapserver | Osgeo | 4.4.0-beta2 (including) | 4.4.0-beta2 (including) |
| Mapserver | Osgeo | 4.4.0-beta3 (including) | 4.4.0-beta3 (including) |
| Mapserver | Osgeo | 4.6.0 (including) | 4.6.0 (including) |
| Mapserver | Osgeo | 4.6.0-beta1 (including) | 4.6.0-beta1 (including) |
| Mapserver | Osgeo | 4.6.0-beta2 (including) | 4.6.0-beta2 (including) |
| Mapserver | Osgeo | 4.6.0-beta3 (including) | 4.6.0-beta3 (including) |
| Mapserver | Osgeo | 4.6.0-rc1 (including) | 4.6.0-rc1 (including) |
| Mapserver | Osgeo | 4.8.0-beta1 (including) | 4.8.0-beta1 (including) |
| Mapserver | Osgeo | 4.8.0-beta2 (including) | 4.8.0-beta2 (including) |
| Mapserver | Osgeo | 4.8.0-beta3 (including) | 4.8.0-beta3 (including) |
| Mapserver | Osgeo | 4.8.0-rc1 (including) | 4.8.0-rc1 (including) |
| Mapserver | Osgeo | 4.8.0-rc2 (including) | 4.8.0-rc2 (including) |
| Mapserver | Osgeo | 4.10.0 (including) | 4.10.0 (including) |
| Mapserver | Osgeo | 4.10.0-beta1 (including) | 4.10.0-beta1 (including) |
| Mapserver | Osgeo | 4.10.0-beta2 (including) | 4.10.0-beta2 (including) |
| Mapserver | Osgeo | 4.10.0-beta3 (including) | 4.10.0-beta3 (including) |
| Mapserver | Osgeo | 4.10.0-rc1 (including) | 4.10.0-rc1 (including) |
| Mapserver | Osgeo | 4.10.1 (including) | 4.10.1 (including) |
| Mapserver | Osgeo | 4.10.2 (including) | 4.10.2 (including) |
| Mapserver | Osgeo | 4.10.3 (including) | 4.10.3 (including) |
| Mapserver | Osgeo | 4.10.4 (including) | 4.10.4 (including) |
| Mapserver | Osgeo | 4.10.5 (including) | 4.10.5 (including) |
| Mapserver | Osgeo | 5.0.0 (including) | 5.0.0 (including) |
| Mapserver | Osgeo | 5.0.0-beta1 (including) | 5.0.0-beta1 (including) |
| Mapserver | Osgeo | 5.0.0-beta2 (including) | 5.0.0-beta2 (including) |
| Mapserver | Osgeo | 5.0.0-beta3 (including) | 5.0.0-beta3 (including) |
| Mapserver | Osgeo | 5.0.0-beta4 (including) | 5.0.0-beta4 (including) |
| Mapserver | Osgeo | 5.0.0-beta5 (including) | 5.0.0-beta5 (including) |
| Mapserver | Osgeo | 5.0.0-beta6 (including) | 5.0.0-beta6 (including) |
| Mapserver | Osgeo | 5.0.0-rc1 (including) | 5.0.0-rc1 (including) |
| Mapserver | Osgeo | 5.0.0-rc2 (including) | 5.0.0-rc2 (including) |
| Mapserver | Osgeo | 5.2.0 (including) | 5.2.0 (including) |
| Mapserver | Osgeo | 5.2.0-beta1 (including) | 5.2.0-beta1 (including) |
| Mapserver | Osgeo | 5.2.0-beta2 (including) | 5.2.0-beta2 (including) |
| Mapserver | Osgeo | 5.2.0-beta3 (including) | 5.2.0-beta3 (including) |
| Mapserver | Osgeo | 5.2.0-beta4 (including) | 5.2.0-beta4 (including) |
| Mapserver | Osgeo | 5.2.0-rc1 (including) | 5.2.0-rc1 (including) |
| Mapserver | Osgeo | 5.2.1 (including) | 5.2.1 (including) |
| Mapserver | Osgeo | 5.4.0 (including) | 5.4.0 (including) |
| Mapserver | Osgeo | 5.4.0-beta1 (including) | 5.4.0-beta1 (including) |
| Mapserver | Osgeo | 5.4.0-beta2 (including) | 5.4.0-beta2 (including) |
| Mapserver | Osgeo | 5.4.0-beta3 (including) | 5.4.0-beta3 (including) |
| Mapserver | Osgeo | 5.4.0-beta4 (including) | 5.4.0-beta4 (including) |
| Mapserver | Osgeo | 5.4.0-rc1 (including) | 5.4.0-rc1 (including) |
| Mapserver | Osgeo | 5.4.0-rc2 (including) | 5.4.0-rc2 (including) |
| Mapserver | Osgeo | 5.4.1 (including) | 5.4.1 (including) |
| Mapserver | Osgeo | 5.4.2 (including) | 5.4.2 (including) |
| Mapserver | Osgeo | 5.6.0 (including) | 5.6.0 (including) |
| Mapserver | Osgeo | 5.6.1 (including) | 5.6.1 (including) |
| Mapserver | Osgeo | 5.6.3 (including) | 5.6.3 (including) |
| Mapserver | Umn | 4.10.7 (including) | 4.10.7 (including) |
| Mapserver | Umn | 5.2.2 (including) | 5.2.2 (including) |
| Mapserver | Umn | 5.2.3 (including) | 5.2.3 (including) |
| Mapserver | Umn | 5.6.4 (including) | 5.6.4 (including) |
| Mapserver | Umn | 5.6.5 (including) | 5.6.5 (including) |
| Mapserver | Umn | 5.6.6 (including) | 5.6.6 (including) |
| Mapserver | Umn | 5.6.7 (including) | 5.6.7 (including) |
| Mapserver | Umn | 6.0.0-beta1 (including) | 6.0.0-beta1 (including) |
| Mapserver | Umn | 6.0.0-beta2 (including) | 6.0.0-beta2 (including) |
| Mapserver | Umn | 6.0.0-beta3 (including) | 6.0.0-beta3 (including) |
| Mapserver | Umn | 6.0.0-beta4 (including) | 6.0.0-beta4 (including) |
| Mapserver | Umn | 6.0.0-beta5 (including) | 6.0.0-beta5 (including) |
| Mapserver | Umn | 6.0.0-beta6 (including) | 6.0.0-beta6 (including) |
| Mapserver | Umn | 6.0.0-beta7 (including) | 6.0.0-beta7 (including) |
| Mapserver | Umn | 6.0.0-rc1 (including) | 6.0.0-rc1 (including) |
| Mapserver | Umn | 6.0.0-rc2 (including) | 6.0.0-rc2 (including) |
| Mapserver | Ubuntu | hardy | * |
| Mapserver | Ubuntu | upstream | * |