CVE-2011-2704: OSGeo Mapserver

High severity, CVSS 7.5. EPSS: 5.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in MapServer before 4.10.7 and 5.x before 5.6.7 allows remote attackers to execute arbitrary code via vectors related to OGC filter encoding.

Affected products

• OSGeo Mapserver: up to and including 4.10.6; version 4.2.0 only; version 4.4.0 only; version 4.6.0 only; version 4.8.0 only; version 4.10.0 only; …
• Umn Mapserver: version 5.2.2 only; version 5.2.3 only; version 5.6.4 only; version 5.6.5 only; version 5.6.6 only

Published 2011-08-01. Last modified 2026-06-16.