Unscored severity · published Mar 31, 2009
CVE-2009-1177
Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors
–
CVSS
2.9%
EPSS
No
On KEV
Description
Multiple stack-based buffer overflows in maptemplate.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 have unknown impact and remote attack vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MA
Mapserver · Osgeo
4.2.0; 4.4.0; 4.4.0; 4.4.0; 4.4.0; 4.6.0; +33 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-1177
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-1177
Patch
http://lists.osgeo.org/pipermail/mapserver-users/2009-March/060600.html
secunia.com
http://secunia.com/advisories/34603
trac.osgeo.org
http://trac.osgeo.org/mapserver/ticket/2944
Exploit
http://www.positronsecurity.com/advisories/2009-000.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/502271/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/34306
More from Mapserver
9.8
CVE-2025-59431
MapServer is a system for developing web-based GIS applications
9.8
CVE-2017-5522
Stack-based buffer overflow in MapServer before 6.0.6, 6.2.x before 6.2.4, 6.4.x before 6.4.5, and 7.0.x before 7.0.4 allows remote attackers to cause a denial of service (crash)…
7.5
CVE-2026-45104
MapServer: NULL pointer dereference in SLD `<ElseFilter>` rule parsing reachable via WMS `SLD_BODY`
7.5
CVE-2026-33721
MapServer has heap buffer overflow in SLD `Categorize` Threshold parsing
7.5
CVE-2010-1678
Mapserver 5.2, 5.4 and 5.6 before 5.6.5-2 improperly validates symbol index values during Mapfile parsing