CVE-2007-5742

N/A Unknown
Published: December 01, 2007 Modified: April 23, 2026
View on NVD

Description

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://osvdb.org/41713
Source: cve@mitre.org
http://osvdb.org/41713
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/27786
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/27920
Source: af854a3a-2127-422b-91ae-364da2661108
http://secunia.com/advisories/27943
Source: af854a3a-2127-422b-91ae-364da2661108
http://sourceforge.net/project/shownotes.php?release_id=557098
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.debian.org/security/2007/dsa-1421
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/26626
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.vupen.com/english/advisories/2007/4026
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
http://www.wesnoth.org/forum/viewtopic.php?t=18844
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/38752
Source: af854a3a-2127-422b-91ae-364da2661108

26 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
2.8%
85th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

wesnoth