Battle for Wesnoth turn_cmd Remote Denial of Service Vulnerability

Bugtraq ID:	26625
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-6201
Remote:	Yes
Local:	No
Published:	Nov 28 2007 12:00AM
Updated:	May 07 2015 05:03PM
Credit:	The vendor disclosed this vulnerability.
Vulnerable:	Wesnoth Wesnoth 1.2.7 Wesnoth Wesnoth 1.2.6 Red Hat Fedora 7
Not Vulnerable:	Wesnoth Wesnoth 1.2.8

Battle for Wesnoth turn_cmd Remote Denial of Service Vulnerability

Battle for Wesnoth is prone to a remote denial-of-service vulnerability because it fails to handle unexpected input.

Attackers can exploit this issue to cause denial-of-service conditions.

Versions prior to Battle for Wesnoth 1.2.8 are affected by this issue.

Battle for Wesnoth turn_cmd Remote Denial of Service Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Battle for Wesnoth turn_cmd Remote Denial of Service Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.


Wesnoth Wesnoth 1.2.6

• Wesnoth wesnoth-1.2.8.tar.bz2
  http://downloads.sourceforge.net/wesnoth/wesnoth-1.2.8.tar.bz2?downloa d

Wesnoth Wesnoth 1.2.7

• Wesnoth wesnoth-1.2.8.tar.bz2
  http://downloads.sourceforge.net/wesnoth/wesnoth-1.2.8.tar.bz2?downloa d

Battle for Wesnoth turn_cmd Remote Denial of Service Vulnerability

References:

• Wesnoth 1.2.8 Change Log (Wesnoth)
  
• Wesnoth Homepage (Wesnoth)