Nicolas Boullis Security Vulnerabilities

CVE-2003-0705

Buffer overflow in mah-jong 1.5.6 and earlier allows remote attackers to execute arbitrary code.

CVE-2003-0706

Unknown vulnerability in mah-jong 1.5.6 and earlier allows remote attackers to cause a denial of service (tight loop).

CVE-2004-0458

mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.