CVE-2007-3917

CVE-2007-3917 describes a denial-of-service vulnerability in the multiplayer engine of Wesnoth versions 1.2.x prior to 1.2.7 and 1.3.x prior to 1.3.9. A remote server can crash both clients and servers by sending a long message containing multibyte characters that, when truncated, result in an invalid UTF-8 string, triggering an uncaught exception. This vulnerability has a CVSS score of 7.8 (High), indicating a network-based attack with low complexity leading to complete availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.