|
|
| |
|
| |
wesnoth: multiple vulnerabilities
| Package(s): | wesnoth |
CVE #(s): | CVE-2009-0366
CVE-2009-0367
|
| Created: | March 12, 2009 |
Updated: | March 18, 2009 |
| Description: |
The game wesnoth has multiple vulnerabilities.
From the Debian alert:
CVE-2009-0366
Daniel Franke discovered that the wesnoth server is prone to a denial of
service attack when receiving special crafted compressed data.
CVE-2009-0367
Daniel Franke discovered that the sandbox implementation for the python
AIs can be used to execute arbitrary python code on wesnoth clients. In
order to prevent this issue, the python support has been disabled. A
compatibility patch was included, so that the affected campagne is still
working properly. |
| Alerts: |
|
( Log in to post comments)
|
|
|