https://bugzilla.novell.com/show_bug.cgi?id=332098 Summary: Wesnoth chat message truncate doesn't care for UTF-8 multibyte characters Product: openSUSE 10.3 Version: Final Platform: i586 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: X11 Applications AssignedTo: hhetter@novell.com ReportedBy: hhetter@novell.com QAContact: sndirsch@novell.com CC: security-team@suse.de Found By: Other A malicious user could send a long chat message with multibyte characters, the server would truncate the message on a fixed length, without paying attention to the multibyte characters. This led to invalid utf-8 on the client and an uncaught exception was thrown. Note both wesnoth and the wesnoth server are affected. The bug has been filed under CVE-2007-3917. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.