CVE-2007-5742

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-12-01 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.

Affected products

Wesnoth: 0.2.1, 0.3, 0.3.1, 0.3.2, 0.3.3, 0.3.4 (+75)

References

http://osvdb.org/41713
http://secunia.com/advisories/27786
http://secunia.com/advisories/27920
http://secunia.com/advisories/27943
http://sourceforge.net/project/shownotes.php?release_id=557098
http://www.debian.org/security/2007/dsa-1421
http://www.securityfocus.com/bid/26626
http://www.vupen.com/english/advisories/2007/4026
http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289
http://www.wesnoth.org/forum/viewtopic.php?t=18844
https://exchange.xforce.ibmcloud.com/vulnerabilities/38752
https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00004.html

Get alerted when CVE-2007-5742 or the next vulnerability affects your stack