Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8 and 1.3.x before 1.3.12 allows attackers to cause a denial of service (hang) via a \faulty add-on\ and possibly execute other commands via unknown vectors related to the turn_cmd option.