Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2015-8972

Опубликовано: 23 янв. 2017
Источник: ubuntu
Приоритет: negligible
CVSS2: 7.5
CVSS3: 9.8

Описание

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

6.2.5-1
cosmic

not-affected

6.2.5-1
devel

not-affected

6.2.5-1
disco

not-affected

6.2.5-1
eoan

not-affected

6.2.5-1
esm-apps/bionic

not-affected

6.2.5-1
esm-apps/focal

not-affected

6.2.5-1
esm-apps/jammy

not-affected

6.2.5-1
esm-apps/noble

not-affected

6.2.5-1

Показывать по

7.5 High

CVSS2

9.8 Critical

CVSS3

Связанные уязвимости

CVSS3: 7.8
redhat
больше 9 лет назад

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.

CVSS3: 9.8
nvd
около 9 лет назад

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.

CVSS3: 9.8
debian
около 9 лет назад

Stack-based buffer overflow in the ValidateMove function in frontend/m ...

suse-cvrf
около 9 лет назад

Security update for gnuchess

CVSS3: 9.8
github
больше 3 лет назад

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.

7.5 High

CVSS2

9.8 Critical

CVSS3