AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2007-3917

HIGH · CVSS 7.8 EPSS 2.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-10-11 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE
CVE-2007-3917
Severity
HIGH
CVSS
7.8
EPSS
2.10%

Original Filing — NVD Description

The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a long message with multibyte characters that can produce an invalid UTF-8 string after it is truncated, which triggers an uncaught exception, involving the truncate_message function in server/server.cpp. NOTE: this issue affects both clients and servers.