Description (CNA)
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.openwall.com/lists/oss-security/2016/11/13/2
- http://www.openwall.com/lists/oss-security/2016/11/14/12
- http://www.openwall.com/lists/oss-security/2016/11/14/11
- http://svn.savannah.gnu.org/viewvc/chess?revision=134&view=revision
- http://lists.gnu.org/archive/html/bug-gnu-chess/2015-10/msg00002.html
ADP enrichment
No English description supplied.
- http://www.openwall.com/lists/oss-security/2016/11/13/2
- http://www.openwall.com/lists/oss-security/2016/11/14/12
- http://www.openwall.com/lists/oss-security/2016/11/14/11
- http://svn.savannah.gnu.org/viewvc/chess?revision=134&view=revision
- http://lists.gnu.org/archive/html/bug-gnu-chess/2015-10/msg00002.html