← Back

CVE-2008-7227

nvd nist
Published: Sep 14, 2009Modified: Apr 23, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.

Affected (26)

Products: Geoserver: Geoserver
Geoserver
1 product
Geoserver
Configuration A
26 vulnerable
Vulnerable SoftwareAffected Versions
Geoserver
Geoserver
Up to 1.6.0
Geoserver
Version 1.3.0
Geoserver
Version 1.3.0 beta
Geoserver
Version 1.3.0 pr1
Geoserver
Version 1.3.0 rc2
Geoserver
Version 1.3.0 rc4
Geoserver
Version 1.3.0 rc6
Geoserver
Version 1.3.0 rc7
Geoserver
Version 1.3.2
Geoserver
Version 1.4.0 m0
Geoserver
Version 1.4.0 m1
Geoserver
Version 1.5.0 beta2
Geoserver
Version 1.5.0 rc3
Geoserver
Version 1.5.0 rc4
Geoserver
Version 1.5.1
Geoserver
Version 1.5.1 rc1
Geoserver
Version 1.5.2
Geoserver
Version 1.5.3
Geoserver
Version 1.6.0
Geoserver
Version 1.6.0 beta1
Geoserver
Version 1.6.0 beta2
Geoserver
Version 1.6.0 rc1
Geoserver
Version 1.6.0 rc2
Geoserver
Version 1.6.0 rc3
Geoserver
Version 1.7.0 beta1
Geoserver
Version 3.0 beta3

Related CWEs

CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.