Description
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option.
References
- http://sourceforge.net/project/shownotes.php?release_id=557098
- 26625 vdb-entry
- wesnoth-turncmd-dos(38751) vdb-entry
- 27786 third-party-advisory
- http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289
- ADV-2007-4026 vdb-entry
- http://www.wesnoth.org/forum/viewtopic.php?t=18844