Lucene search
+L

235 matches found

CNVD
CNVD
•added 2017/02/08 12:00 a.m.•53 views

GNU Chess Buffer Overflow Vulnerability

GNU Chess aka gnuchess is a chess program. A stack buffer overflow vulnerability exists in the ValidateMove function in the frontend/move.cc file in GNU Chess 6.2.3 and earlier. An attacker can exploit this vulnerability to execute arbitrary code with large input values...

9.8CVSS8.2AI score0.03762EPSS
SaveExploits1References1
NVD
NVD
•added 2017/01/23 9:59 p.m.•32 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS9.8AI score0.03762EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
•added 2017/01/23 9:59 p.m.•29 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS7.7AI score0.03762EPSS
SaveExploits1References3
osv_ubuntu
osv_ubuntu
•added 2017/01/23 9:59 p.m.•12 views

UBUNTU-CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS6.4AI score0.03762EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2017/01/23 9:59 p.m.•14 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS9.7AI score
SaveExploits0References10
Prion
Prion
•added 2017/01/23 9:59 p.m.•20 views

Stack overflow

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

7.5CVSS8.4AI score0.03762EPSS
SaveExploits1References5Affected Software1
osv_debian
osv_debian
•added 2017/01/23 9:59 p.m.•15 views

DEBIAN-CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS8.3AI score0.03762EPSS
SaveExploits1References1
CVE
CVE
•added 2017/01/23 9:00 p.m.•95 views

CVE-2015-8972

GNU Chess (gnuchess) is vulnerable to a stack-based buffer overflow in the ValidateMove function (frontend/move.cc) present in version 6.2.3 and earlier; a large input can allow context-dependent attackers to execute arbitrary code, notably when running in UCI mode. Public sources consistently st...

9.8CVSS9.7AI score0.03762EPSS
SaveExploits1References5Affected Software1
Debian CVE
Debian CVE
•added 2017/01/23 9:00 p.m.•71 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS9.1AI score0.03762EPSS
SaveExploits1
Cvelist
Cvelist
•added 2017/01/23 9:00 p.m.•41 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8AI score0.03762EPSS
SaveExploits1References5
Mend
Mend
•added 2017/01/23 9:00 p.m.•2 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS0.03762EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/01/23 12:00 a.m.•6 views

CVE-2015-8972: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS6.8AI score0.03762EPSS
SaveExploits1References2
Openbugbounty
Openbugbounty
•added 2017/01/14 12:01 a.m.•21 views

login.chess-online.com XSS vulnerability

Vulnerable URL: http://login.chess-online.com/ru-ru/account/register?email=%3Cscript/src=//%E2%97%BC.ws%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

6.3AI score
SaveExploits0
hackapp
hackapp
•added 2016/11/20 4:23 p.m.•10 views

Chess Master King - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Chess Master King published at the 'play' market has multiple vulnerabilities...

0.8AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2016/11/17 12:00 a.m.•3 views

PT-2017-7509

Name of the Vulnerable Software and Affected Versions GNU Chess versions prior to 6.2.4 Description A stack-based buffer overflow issue exists in the ValidateMove function, potentially allowing attackers to execute arbitrary code via a large input, particularly when the software is in UCI mode...

9.8CVSS0.03762EPSS
SaveExploits1References21
RedhatCVE
RedhatCVE
•added 2016/11/15 12:17 p.m.•27 views

CVE-2015-8972

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess aka gnuchess before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode...

9.8CVSS7.6AI score0.03762EPSS
SaveExploits1References1
Openbugbounty
Openbugbounty
•added 2016/08/30 9:48 p.m.•16 views

login.chess-online.com XSS vulnerability

Vulnerable URL: http://login.chess-online.com/ru-ru/account/register?email=%3Csvg/onload=alert%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

6.2AI score
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/07/08 8:55 p.m.•16 views

chess-db.com XSS vulnerability

Vulnerable URL: http://chess-db.com/public/pinfo.jsp?id=" Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 10:34 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 108303 VIP website status:| No Check chess-db.com...

6.3AI score
SaveExploits0
hackapp
hackapp
•added 2016/04/03 7:38 a.m.•17 views

将棋アプリ 将皇 - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application 将棋アプリ 将皇 published at the 'play' market has multiple vulnerabilities...

0.3AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 10:18 a.m.•15 views

Chess for Kids - Play & Learn - Base64 encoded String, Customized SSL, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Chess for Kids - Play & Learn published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder