Search/CVE-2009-0840
● CVE

CVE-2009-0840

Vendorosgeo, umnProductmapserverDiscoveredMar 31, 2009UpdatedApr 23, 2026

Heap-based buffer underflow in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x before 4.10.4 and 5.x before 5.2.2 allows remote attackers to have an unknown impact via a negative value in the Content-Length HTTP header.

View graph Watch Export
CVSS v3.1
—
EPSS
5.28%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Connections
3 relationships
Timeline
disclosure → media coverage
Mar 31, 2009
Disclosure — published as a CVE record. · last revised by NVD Apr 23, 2026