CVE-2009-0878

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-03-12 · updated 2026-06-16
Weakness: CWE-399

Description

The read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote attackers to cause a denial of service (memory consumption and daemon hang) via a map with a large (1) width or (2) height.

Affected products

Wesnoth: through 1.4.7; 0.2.1, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4 (+102)

References

http://launchpad.net/bugs/335089
http://launchpad.net/bugs/336396
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog
http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?r2=32987&rev=32987&r1=31859&dir_pagestart=200
http://svn.gna.org/viewcvs/wesnoth/trunk/src/terrain_translation.cpp?rev=33078&dir_pagestart=200&view=log
https://exchange.xforce.ibmcloud.com/vulnerabilities/49294
https://gna.org/bugs/index.php?13031
http://launchpad.net/bugs/335089
http://launchpad.net/bugs/336396
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelog
http://packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelog

Get alerted when CVE-2009-0878 or the next vulnerability affects your stack