CVE-2007-4629
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows...
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
- Record
CVE-2007-4629- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
- Record
CVE-2007-4629- Updated
- 2026-11-02
EUVDEUVD-2007-4611 No score
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
- Record
EUVD-2007-4611- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c6g6-2mm5-xfwv No score
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows...
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
- Record
GHSA-c6g6-2mm5-xfwv- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
- Record
CVE-2007-4629- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-4629 No score
Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and possibly execute arbitrary code via a mapfile with a long layer name, group name, or metadata entry name.
- Record
DEBIAN-CVE-2007-4629- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases | ||
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-4629 is a high vulnerability (CVSS 7.5) in University Of Minnesota Mapserver, published August 31, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.49%, the 89th percentile. Fixed in mapserver 4.10.3-1.
References
trac.osgeo.org/mapserver/ticket/2252
secunia.com/advisories/29688
mapserver.gis.umn.edu/download/current/HISTORY.TXT
securityreason.com/securityalert/3082
Show 8 moreShow less
redhat.com/archives/fedora-package-announce/2007-September/msg00096.html
vupen.com/english/advisories/2007/2974
securityfocus.com/bid/25582
bugzilla.redhat.com/show_bug.cgi?id=272081
debian.org/security/2008/dsa-1539
nvd.nist.gov/vuln/detail/CVE-2007-4629
github.com/advisories/GHSA-c6g6-2mm5-xfwv
security-tracker.debian.org/tracker/CVE-2007-4629