CVE-2011-2704

Name	CVE-2011-2704
Description	Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
References	DSA-2285-1
NVD severity	high (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
mapserver (PTS)	wheezy	6.0.1-3.2+deb7u2	fixed
	wheezy (security)	6.0.1-3.2+deb7u4	fixed
	jessie (security), jessie	6.4.1-5+deb8u3	fixed
	stretch	7.0.4-2	fixed
	buster, sid	7.0.6-2	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
mapserver	source	(unstable)	6.0.1-1	high
mapserver	source	lenny	5.0.3-3+lenny7	high	DSA-2285-1
mapserver	source	squeeze	5.6.5-2+squeeze2	high	DSA-2285-1