CVE-2007-4542

Publication date 27 August 2007

Last updated 24 July 2024


Ubuntu priority

Description

Multiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the (1) processLine function in maptemplate.c and the (2) writeError function in mapserv.c in the mapserv CGI program.

Status

Package Ubuntu Release Status
mapserver 9.10 karmic
Fixed 4.10.3-1
9.04 jaunty
Fixed 4.10.3-1
8.10 intrepid
Fixed 4.10.3-1
8.04 LTS hardy
Fixed 4.10.3-1
7.10 gutsy
Fixed 4.10.3-1
7.04 feisty Ignored end of life, was needed
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper Ignored end of life