Approved changes feed: RSS · Atom

cpe:2.3:a:university_of_minnesota:mapserver:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUniversity Of Minnesota (c803709e-a29f-59ec-a723-63120be8f824)
ProductMapserver (34e33bf5-1307-5df8-8bf9-d23b0fde2f2b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/mapserver/mapserver purl2cpe 2026-06-01 10:11:19.587085
pkg:rpm/fedora/mapserver purl2cpe 2026-06-01 10:11:19.587087
pkg:rpm/opensuse/mapserver purl2cpe 2026-06-01 10:11:19.587088

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4629 vulnerable 2026-06-08 04:49:56.860821 Details available
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
Published: 2007-08-31T01:00:00.000Z
Updated: 2024-08-07T15:01:09.881Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4542 vulnerable 2026-06-08 04:49:56.487168 Details available
Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.
Published: 2007-08-27T21:00:00.000Z
Updated: 2024-08-07T15:01:09.799Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.