GCVE - cpe:2.3:a:wesnoth:wesnoth:1.3.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wesnoth:wesnoth:1.3.3:*:*:*:*:*:*:*

part: a version: 1.3.3 update: *

Vendor	Wesnoth (`296a97a2-0e03-535a-8cc1-e8c0cef088e1`)
Product	Wesnoth (`3152ef7c-8630-5af4-a1ea-73bbb14e6c89`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/wesnoth/wesnoth`	purl2cpe	2026-06-01 10:12:15.475804
`pkg:sourceforge/wesnoth`	purl2cpe	2026-06-01 10:12:15.475806

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-0878`	vulnerable	2026-06-08 04:51:11.866878	Details available The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height. Published: 2009-03-12T15:00:00.000Z Updated: 2024-08-07T04:48:52.594Z Open on db.gcve.eu Reference links http://launchpad.net/bugs/336396 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog https://exchange.xforce.ibmcloud.com/vulnerabilities/49294 http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6201`	vulnerable	2026-06-08 04:50:08.191972	Details available Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option. Published: 2007-12-01T02:00:00.000Z Updated: 2024-08-07T15:54:27.170Z Open on db.gcve.eu Reference links http://sourceforge.net/project/shownotes.php?release_id=557098 http://www.securityfocus.com/bid/26625 https://exchange.xforce.ibmcloud.com/vulnerabilities/38751 http://secunia.com/advisories/27786 http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3917`	vulnerable	2026-06-08 04:49:55.398425	Details available The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp. NOTE: this issue affects both clients and servers. Published: 2007-10-11T10:00:00.000Z Updated: 2024-08-07T14:37:05.771Z Open on db.gcve.eu Reference links http://www.wesnoth.org/forum/viewtopic.php?p=256618 https://bugzilla.redhat.com/show_bug.cgi?id=324841 http://www.wesnoth.org/forum/viewtopic.php?t=18188 http://osvdb.org/41711 http://www.securityfocus.com/bid/25995	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.