NVD

Id
56053  
Name
CVE-2007-3917  
Description
The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp. NOTE: this issue affects both clients and servers.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:C)  
Pub Date
2017-01-07  
Published
2007-10-11  
Modified Date
2011-03-25  
Seq
2007-3917  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
285445 56053 CVE-2007-3917 http://svn.gna.org/viewcvs/wesnoth/tags/1.2.7/changelog?rev=20982&view=download  View
285446 56053 CVE-2007-3917 DSA-1386  View
285447 56053 CVE-2007-3917 25995  View
285448 56053 CVE-2007-3917 ADV-2007-3449  View
285449 56053 CVE-2007-3917 http://www.wesnoth.org/forum/viewtopic.php?p=256618  View
285450 56053 CVE-2007-3917 http://www.wesnoth.org/forum/viewtopic.php?t=18188  View
285451 56053 CVE-2007-3917 wesnoth-utf8-dos(37047)  View
285452 56053 CVE-2007-3917 https://bugzilla.redhat.com/show_bug.cgi?id=324841  View
285453 56053 CVE-2007-3917 FEDORA-2007-2496  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57185 JVNDB-2007-005877 Wesnoth のマルチプレーヤーエンジンにおけるサービス運用妨害 (DoS) の脆弱性 Wesnoth のマルチプレーヤーエンジンは、server/server.cpp 内の truncate_message 関数に関する処理に不備があるため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-3917 27272 CVE-2007-3917 56053 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005877.html 2007-10-11 2012-12-20 View