GCVE - cpe:2.3:a:wesnoth:wesnoth:1.2.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wesnoth:wesnoth:1.2.7:*:*:*:*:*:*:*

part: a version: 1.2.7 update: *

Vendor	Wesnoth (`296a97a2-0e03-535a-8cc1-e8c0cef088e1`)
Product	Wesnoth (`3152ef7c-8630-5af4-a1ea-73bbb14e6c89`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wesnoth/wesnoth`	purl2cpe	2026-06-01 10:12:15.454552
`pkg:sourceforge/wesnoth`	purl2cpe	2026-06-01 10:12:15.454554

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0878`	vulnerable	2026-06-08 04:51:11.862500	Details available The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height. Published: 2009-03-12T15:00:00.000Z Updated: 2024-08-07T04:48:52.594Z Open on db.gcve.eu Reference links http://launchpad.net/bugs/336396 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog https://exchange.xforce.ibmcloud.com/vulnerabilities/49294 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0366`	vulnerable	2026-06-08 04:51:09.132924	Details available The uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows remote attackers to cause a denial of service via a large compressed WML document. Published: 2009-03-12T15:00:00.000Z Updated: 2024-08-07T04:31:25.762Z Open on db.gcve.eu Reference links http://launchpad.net/bugs/336396 https://gna.org/bugs/index.php?13037 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog http://osvdb.org/52672 http://svn.gna.org/viewcvs/wesnoth/trunk/src/server/simple_wml.cpp?rev=33069&view=log	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6201`	vulnerable	2026-06-08 04:50:08.186199	Details available Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option. Published: 2007-12-01T02:00:00.000Z Updated: 2024-08-07T15:54:27.170Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=557098 http://www.securityfocus.com/bid/26625 https://exchange.xforce.ibmcloud.com/vulnerabilities/38751 http://secunia.com/advisories/27786 http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5742`	vulnerable	2026-06-08 04:50:06.970832	Details available Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors. Published: 2007-12-01T02:00:00.000Z Updated: 2024-08-07T15:39:13.744Z Open on db.gcve.eu Reference links http://osvdb.org/41713 http://secunia.com/advisories/27920 https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00006.html http://sourceforge.net/project/shownotes.php?release_id=557098 http://secunia.com/advisories/27943	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.