CVE-2015-8972

Critical

Published: 23/01/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

A stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before version 6.2.4 may allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated in UCI mode.

Risk Assessment

Attackers may exploit this vulnerability to execute remote code, potentially leading to full system compromise where GNU Chess is running.

Recommendation

It is recommended to update GNU Chess to version 6.2.4 or later to mitigate this vulnerability.

Original NVD description (English source)

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.