CVE-2004-1290: Buffer overflow in the process_moves function in pgn2web.c for pgn2web 0.3 allows remote attackers to execu...

Security readout for executives and security teams

CVE-2004-1290 is a buffer overflow in pgn2web 0.3, a chess PGN-to-web conversion tool. A malicious PGN file could cause arbitrary code execution when processed. Business risk depends on whether this legacy tool is still used, especially in automated upload or conversion workflows. Exposure is likely limited to systems still running pgn2web 0.3 or wrappers that process PGN files with it. Risk is higher where PGN files come from users, email, downloads, or public websites. Treat as targeted remediation, not broad emergency response. Prioritize quickly if chess PGN processing is internet-facing, automated, or tied to sensitive systems. Otherwise, confirm absence during legacy software review. Mitigation focus: Inventory any use of pgn2web, especially version 0.3.; Do not process untrusted PGN files with pgn2web 0.3.; Check project or vendor guidance for a fixed release or replacement..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.