Unrated severityNVD Advisory· Published Mar 5, 2009· Updated Jun 16, 2026
CVE-2009-0367
CVE-2009-0367
Description
The Python AI module in Wesnoth 1.4.x and 1.5 before 1.5.11 allows remote attackers to escape the sandbox and execute arbitrary code by using a whitelisted module that imports an unsafe module, then using a hierarchical module name to access the unsafe module through the whitelisted module.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
20cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:wesnoth:wesnoth:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.10:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:wesnoth:wesnoth:1.5.9:*:*:*:*:*:*:*
- (no CPE)range: <1.5.11
Patches
Vulnerability mechanics
References
13- www.vupen.com/english/advisories/2009/0595nvdPatchVendor Advisory
- www.wesnoth.org/forum/viewtopic.phpnvdPatchVendor Advisory
- www.wesnoth.org/forum/viewtopic.phpnvdPatchVendor Advisory
- secunia.com/advisories/34058nvdVendor Advisory
- launchpad.net/bugs/335089nvd
- launchpad.net/bugs/336396nvd
- launchpad.net/bugs/cve/2009-0367nvd
- packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.4.7-4/changelognvd
- packages.debian.org/changelogs/pool/main/w/wesnoth/wesnoth_1.5.12-1/changelognvd
- secunia.com/advisories/34236nvd
- www.debian.org/security/2009/dsa-1737nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/49058nvd
- gna.org/bugs/index.phpnvd
News mentions
0No linked articles in our index yet.