This vulnerability is a DLL injection that allows an attacker to supply a crafted executable to MapServer, causing it to load malicious DLLs and execute arbitrary code. The flaw is based on common weaknesses in handling dynamic libraries and can lead to full compromise of the system running the service, including confidentiality, integrity, and availability of all hosted data.

The OSGeo Project MapServer, in all releases prior to version 8.0, is affected. No specific patch level is listed, so all pre‑8.0 releases should be treated as vulnerable.

The CVSS score of 9.1 indicates a high severity issue, and the EPSS score of less than 1% suggests that exploitation is currently unlikely but still possible. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a crafted executable supplied to the vulnerable MapServer instance; based on the description, it is inferred that an attacker who can influence the executable files processed by the server can achieve code execution with the privileges of the MapServer process.