CVE-2015-8972: gnuchess: Stack-based buffer overflow on user move input

Severity: Critical

CVSS Score: 9.8

Stack-based buffer overflow in the ValidateMove function in frontend/move.cc in GNU Chess (aka gnuchess) before 6.2.4 might allow context-dependent attackers to execute arbitrary code via a large input, as demonstrated when in UCI mode.