CVE-2021-30184

GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data

published April 7, 2021

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01769 · 78.0th percentile
Published
2021-04-07T11:30Z
EPSS history
Timeline
  • 07 APR 11:30Z
    GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data
    cvelistv5