4.3
CVSSv2

CVE-2009-0366

Published: 12/03/2009 Updated: 21/03/2009
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote malicious users to cause a denial of service via a large compressed WML document.

Vulnerable Product Search on Vulmon Subscribe to Product

wesnoth wesnoth 1.2.7

wesnoth wesnoth 1.2.6

wesnoth wesnoth 1.5.4

wesnoth wesnoth 1.5.3

wesnoth wesnoth 1.4.3

wesnoth wesnoth 1.4.4

wesnoth wesnoth 1.4.5

wesnoth wesnoth 1.3.12

wesnoth wesnoth 1.3.13

wesnoth wesnoth

wesnoth wesnoth 1.1.12

wesnoth wesnoth 1.1.3

wesnoth wesnoth 1.1.4

wesnoth wesnoth 1.1.10

wesnoth wesnoth 1.2.2

wesnoth wesnoth 1.2.5

wesnoth wesnoth 1.5.8

wesnoth wesnoth 1.5.7

wesnoth wesnoth 1.5.0

wesnoth wesnoth 1.4

wesnoth wesnoth 1.3.8

wesnoth wesnoth 1.3.9

wesnoth wesnoth 1.3.16

wesnoth wesnoth 1.3.17

wesnoth wesnoth 1.1.13

wesnoth wesnoth 1.1.1

wesnoth wesnoth 1.1.9

wesnoth wesnoth 1.1.7

wesnoth wesnoth 1.2.4

wesnoth wesnoth 1.2.8

wesnoth wesnoth 1.5.6

wesnoth wesnoth 1.5.5

wesnoth wesnoth 1.4.1

wesnoth wesnoth 1.4.2

wesnoth wesnoth 1.3.10

wesnoth wesnoth 1.3.11

wesnoth wesnoth 1.3.18

wesnoth wesnoth 1.3.19

wesnoth wesnoth 1.1.2

wesnoth wesnoth 1.1

wesnoth wesnoth 1.1.8

wesnoth wesnoth 1.0

wesnoth wesnoth 1.2.1

wesnoth wesnoth 1.2

wesnoth wesnoth 1.2.3

wesnoth wesnoth 1.5.10

wesnoth wesnoth 1.5.9

wesnoth wesnoth 1.5.2

wesnoth wesnoth 1.5.1

wesnoth wesnoth 1.4.6

wesnoth wesnoth 1.4.7

wesnoth wesnoth 1.3.14

wesnoth wesnoth 1.3.15

wesnoth wesnoth 1.1.11

wesnoth wesnoth 1.1.14

wesnoth wesnoth 1.1.5

wesnoth wesnoth 1.1.6

Vendor Advisories

Several security issues have been discovered in wesnoth, a fantasy turn-based strategy game The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2009-0366 Daniel Franke discovered that the wesnoth server is prone to a denial of service attack when receiving special crafted compressed data CVE-2009-0367 Daniel F ...