CVE-2010-2539: OSGeo Mapserver

Low severity, CVSS 2.1. EPSS: 0.3% chance of exploitation in the next 30 days.

Buffer overflow in the msTmpFile function in maputil.c in mapserv in MapServer before 4.10.6 and 5.x before 5.6.4 allows local users to cause a denial of service via vectors involving names of temporary files.

Affected products

• OSGeo Mapserver: up to and including 4.10.5; version 4.2.0 only; version 4.4.0 only; version 4.6.0 only; version 4.8.0 only; version 4.10.0 only; …
• Umn Mapserver: version 4.0 only

Published 2010-08-02. Last modified 2026-06-16.