Approved changes feed: RSS · Atom

cpe:2.3:a:wesnoth:wesnoth:1.2.2:*:*:*:*:*:*:*

part: a version: 1.2.2 update: *

VendorWesnoth (296a97a2-0e03-535a-8cc1-e8c0cef088e1)
ProductWesnoth (3152ef7c-8630-5af4-a1ea-73bbb14e6c89)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/wesnoth/wesnoth purl2cpe 2026-06-01 10:12:15.447233
pkg:sourceforge/wesnoth purl2cpe 2026-06-01 10:12:15.447236

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-0878 vulnerable 2026-06-08 04:51:11.862402 Details available
The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height.
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:48:52.594Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0366 vulnerable 2026-06-08 04:51:09.130215 Details available
The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document.
Published: 2009-03-12T15:00:00.000Z
Updated: 2024-08-07T04:31:25.762Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-6201 vulnerable 2026-06-08 04:50:08.186104 Details available
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option.
Published: 2007-12-01T02:00:00.000Z
Updated: 2024-08-07T15:54:27.170Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5742 vulnerable 2026-06-08 04:50:06.968356 Details available
Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.
Published: 2007-12-01T02:00:00.000Z
Updated: 2024-08-07T15:39:13.744Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-3917 vulnerable 2026-06-08 04:49:55.394207 Details available
The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp. NOTE: this issue affects both clients and servers.
Published: 2007-10-11T10:00:00.000Z
Updated: 2024-08-07T14:37:05.771Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.