CVE-2009-0878

The readgamemap function in src/terraintranslation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service memory consumption and daemon hang via a map with a large 1 width or 2 height...

Code injection

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

CVE-2009-0366

CVE-2009-0366 - Wesnoth DoS via crafted compressed data . The uncompress_buffer function in src/server/simple_wml.cpp is vulnerable in Wesnoth before revision r33069, allowing remote attackers to cause denial of service by sending a large compressed WML document. Exploitation is network-based and...

CVE-2009-0878

The CVE-2009-0878 entry concerns Wesnoth and a vulnerability in the read_game_map function (src/terrain_translation.cpp) that exists before revision r32987. A remote attacker can trigger a denial of service by exploiting maps with an abnormally large width or height, leading to memory consumption...

CVE-2009-0366

The uncompressbuffer function in src/server/simplewml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document...

wesnoth game multiple security vulnerabilities

DoS, code execution...

[SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1737-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 11, 2009 http://www.debian.org/security/faq -...

Debian DSA-1737-1 : wesnoth - several vulnerabilities

Several security issues have been discovered in wesnoth, a fantasy turn-based strategy game. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0366 Daniel Franke discovered that the wesnoth server is prone to a denial of service attack when receiving...

[SECURITY] [DSA 1737-1] New wesnoth packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1737-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 11, 2009 http://www.debian.org/security/faq -...

DSA-1737-1 wesnoth - several vulnerabilities

Bulletin has no description...

Code injection

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

CVE-2009-0367

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

CVE-2009-0367

The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module...

CVE-2009-0367

The CVE-2009-0367 vulnerability affects Wesnoth’s Python AI module (Wesnoth 1.4.x and 1.5 before 1.5.11). A remote attacker can escape the sandbox and run arbitrary Python code by using a whitelisted module that imports an unsafe module, then accessing it via a hierarchical module name through th...

Battle for Wesnoth PythonAI模块绕过安全限制漏洞

BUGTRAQ ID: 33971 CVECAN ID: CVE-2009-0367 Battle for Wesnoth（韦诺之战）是一款开源的战棋游戏。 Battle for Wesnoth的PythonAI中的某些白名单python模块错误的导入了本应受限制的python模块，如果用户受骗下载并使用了恶意的添加程序的话，就可能绕过沙盒限制执行任意Python代码。 David White Battle for Wesnoth 1.5.x David White Battle for Wesnoth 1.4.x 厂商补丁： David White -----------...

[Backports-security-announce] Security Update for wesnoth

Gerfried Fuchs uploaded new packages for wesnoth which fixed the following security problems: CVE-2009-0367 The implementation of the sandbox for the python AIs was possible to circumvent, allowing it to execute arbitrary python code on the clients machine. Please note that the official servers...

[Backports-security-announce] Security Update for wesnoth

Gerfried Fuchs uploaded new packages for wesnoth which fixed the following security problems: CVE-2009-0367 The implementation of the sandbox for the python AIs was possible to circumvent, allowing it to execute arbitrary python code on the clients machine. Please note that the official servers...

Fedora Update for wesnoth FEDORA-2007-2496

Check for the Version of wesnoth OpenVAS Vulnerability Test Fedora Update for wesnoth FEDORA-2007-2496 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for wesnoth FEDORA-2007-3986

Check for the Version of wesnoth OpenVAS Vulnerability Test Fedora Update for wesnoth FEDORA-2007-3986 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for wesnoth FEDORA-2007-3989

Check for the Version of wesnoth OpenVAS Vulnerability Test Fedora Update for wesnoth FEDORA-2007-3989 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...