9
CVSSv2

CVE-2007-5742

Published: 01/12/2007 Updated: 29/07/2017
CVSS v2 Base Score: 9 | Impact Score: 8.5 | Exploitability Score: 10
VMScore: 801
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:C

Vulnerability Summary

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x prior to 1.2.8, and 1.3.x prior to 1.3.12, allows remote malicious users to read arbitrary files via ".." sequences in unknown vectors.

Vulnerable Product Search on Vulmon Subscribe to Product

wesnoth wesnoth 0.2.1

wesnoth wesnoth 0.4.1

wesnoth wesnoth 0.4.2

wesnoth wesnoth 0.5.1

wesnoth wesnoth 0.6

wesnoth wesnoth 0.7

wesnoth wesnoth 0.7.1

wesnoth wesnoth 0.7.6

wesnoth wesnoth 0.7.7

wesnoth wesnoth 0.8.3

wesnoth wesnoth 0.8.4

wesnoth wesnoth 0.9.1

wesnoth wesnoth 0.9.2

wesnoth wesnoth 1.1

wesnoth wesnoth 1.1.1

wesnoth wesnoth 1.1.10

wesnoth wesnoth 1.1.4

wesnoth wesnoth 1.1.5

wesnoth wesnoth 1.2.2

wesnoth wesnoth 1.2.3

wesnoth wesnoth 0.3.2

wesnoth wesnoth 0.3.3

wesnoth wesnoth 0.4.5

wesnoth wesnoth 0.4.6

wesnoth wesnoth 0.4.7

wesnoth wesnoth 0.6.99.2

wesnoth wesnoth 0.6.99.3

wesnoth wesnoth 0.7.2

wesnoth wesnoth 0.7.3

wesnoth wesnoth 0.8.1

wesnoth wesnoth 0.8.10

wesnoth wesnoth 0.8.7

wesnoth wesnoth 0.8.8

wesnoth wesnoth 0.9.5

wesnoth wesnoth 0.9.6

wesnoth wesnoth 1.1.13

wesnoth wesnoth 1.1.14

wesnoth wesnoth 1.1.8

wesnoth wesnoth 1.1.9

wesnoth wesnoth 1.2.6

wesnoth wesnoth 1.2.7

wesnoth wesnoth 0.3.4

wesnoth wesnoth 0.4

wesnoth wesnoth 0.4.8

wesnoth wesnoth 0.5

wesnoth wesnoth 0.6.99.4

wesnoth wesnoth 0.6.99.5

wesnoth wesnoth 0.7.4

wesnoth wesnoth 0.7.5

wesnoth wesnoth 0.8.11

wesnoth wesnoth 0.8.2

wesnoth wesnoth 0.8.9

wesnoth wesnoth 0.9.0

wesnoth wesnoth 0.9.7

wesnoth wesnoth 1.0rcl

wesnoth wesnoth 1.1.2

wesnoth wesnoth 1.1.3

wesnoth wesnoth 1.2

wesnoth wesnoth 1.2.1

wesnoth wesnoth 1.2.8

wesnoth wesnoth 0.3

wesnoth wesnoth 0.3.1

wesnoth wesnoth 0.4.3

wesnoth wesnoth 0.4.4

wesnoth wesnoth 0.6.1

wesnoth wesnoth 0.6.99.1

wesnoth wesnoth 0.7.10

wesnoth wesnoth 0.7.11

wesnoth wesnoth 0.7.8

wesnoth wesnoth 0.7.9

wesnoth wesnoth 0.8

wesnoth wesnoth 0.8.5

wesnoth wesnoth 0.8.6

wesnoth wesnoth 0.9.3

wesnoth wesnoth 0.9.4

wesnoth wesnoth 1.1.11

wesnoth wesnoth 1.1.12

wesnoth wesnoth 1.1.6

wesnoth wesnoth 1.1.7

wesnoth wesnoth 1.2.4

wesnoth wesnoth 1.2.5

Vendor Advisories

A vulnerability has been discovered in Battle for Wesnoth that allows remote attackers to read arbitrary files the user running the client has access to on the machine running the game client For the old stable distribution (sarge) this problem has been fixed in version 090-7 For the stable distribution (etch) this problem has been fixed in ver ...