CVE-2009-1176

CVE-2009-1176 describes a critical buffer overflow vulnerability in MapServer versions 4.x before 4.10.4 and 5.x before 5.2.2. This flaw, residing in the mapserv.c component, allows remote attackers to execute arbitrary code or cause a denial of service by sending a crafted, long 'id' parameter in a query action, as the software fails to properly null-terminate the string. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication or complex attack methods and potentially leading to complete compromise of confidentiality, integrity, and availability. Despite its critical severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.