Security Advisory
CVE-2015-8972
9.8
CRITICAL
Vulnerability Description
Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.
Published Date
January 23, 2017
Official Source
NIST NVD Advisory