CVEvulnerability
CVE-2007-5742
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-12-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.
Affected configurations
• wesnoth wesnoth 0.2.1
• wesnoth wesnoth 0.3
• wesnoth wesnoth 0.3.1
• wesnoth wesnoth 0.3.2
• wesnoth wesnoth 0.3.3
• wesnoth wesnoth 0.3.4
• wesnoth wesnoth 0.4
• wesnoth wesnoth 0.4.1
• wesnoth wesnoth 0.4.2
• wesnoth wesnoth 0.4.3
• wesnoth wesnoth 0.4.4
• wesnoth wesnoth 0.4.5
• wesnoth wesnoth 0.4.6
• wesnoth wesnoth 0.4.7
• wesnoth wesnoth 0.4.8
• wesnoth wesnoth 0.5
• wesnoth wesnoth 0.5.1
• wesnoth wesnoth 0.6
• wesnoth wesnoth 0.6.1
• wesnoth wesnoth 0.6.99.1
• wesnoth wesnoth 0.6.99.2
• wesnoth wesnoth 0.6.99.3
• wesnoth wesnoth 0.6.99.4
• wesnoth wesnoth 0.6.99.5
• wesnoth wesnoth 0.7
• wesnoth wesnoth 0.7.1
• wesnoth wesnoth 0.7.2
• wesnoth wesnoth 0.7.3
• wesnoth wesnoth 0.7.4
• wesnoth wesnoth 0.7.5
• wesnoth wesnoth 0.7.6
• wesnoth wesnoth 0.7.7
• wesnoth wesnoth 0.7.8
• wesnoth wesnoth 0.7.9
• wesnoth wesnoth 0.7.10
• wesnoth wesnoth 0.7.11
• wesnoth wesnoth 0.8
• wesnoth wesnoth 0.8.1
• wesnoth wesnoth 0.8.2
• wesnoth wesnoth 0.8.3
• wesnoth wesnoth 0.8.4
• wesnoth wesnoth 0.8.5
• wesnoth wesnoth 0.8.6
• wesnoth wesnoth 0.8.7
• wesnoth wesnoth 0.8.8
• wesnoth wesnoth 0.8.9
• wesnoth wesnoth 0.8.10
• wesnoth wesnoth 0.8.11
• wesnoth wesnoth 0.9.0
• wesnoth wesnoth 0.9.1
• wesnoth wesnoth 0.9.2
• wesnoth wesnoth 0.9.3
• wesnoth wesnoth 0.9.4
• wesnoth wesnoth 0.9.5
• wesnoth wesnoth 0.9.6
• wesnoth wesnoth 0.9.7
• wesnoth wesnoth 1.0rcl
• wesnoth wesnoth 1.1
• wesnoth wesnoth 1.1.1
• wesnoth wesnoth 1.1.2
… and 21 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/41713 osvdb.org
- http://secunia.com/advisories/27786 secunia.com
- http://secunia.com/advisories/27920 secunia.com
- http://secunia.com/advisories/27943 secunia.com
- http://sourceforge.net/project/shownotes.php?release_id=557098 Patch
- http://www.debian.org/security/2007/dsa-1421 www.debian.org
- http://www.securityfocus.com/bid/26626 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4026 www.vupen.com
- http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289 Patch
- http://www.wesnoth.org/forum/viewtopic.php?t=18844 www.wesnoth.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38752 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00004.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00006.html www.redhat.com
- http://osvdb.org/41713 osvdb.org
- http://secunia.com/advisories/27786 secunia.com
- http://secunia.com/advisories/27920 secunia.com
- http://secunia.com/advisories/27943 secunia.com
- http://sourceforge.net/project/shownotes.php?release_id=557098 Patch
- http://www.debian.org/security/2007/dsa-1421 www.debian.org
- http://www.securityfocus.com/bid/26626 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4026 www.vupen.com
- http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289 Patch
- http://www.wesnoth.org/forum/viewtopic.php?t=18844 www.wesnoth.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38752 exchange.xforce.ibmcloud.com
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00004.html www.redhat.com
- https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00006.html www.redhat.com