5

CVE-2015-0844

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wesnoth ≫ Battle For Wesnoth Version 1.7.0
Wesnoth ≫ Battle For Wesnoth Version 1.7.1
Wesnoth ≫ Battle For Wesnoth Version 1.7.2
Wesnoth ≫ Battle For Wesnoth Version 1.7.3
Wesnoth ≫ Battle For Wesnoth Version 1.7.4
Wesnoth ≫ Battle For Wesnoth Version 1.7.5
Wesnoth ≫ Battle For Wesnoth Version 1.7.6
Wesnoth ≫ Battle For Wesnoth Version 1.7.7
Wesnoth ≫ Battle For Wesnoth Version 1.7.8 Update beta1
Wesnoth ≫ Battle For Wesnoth Version 1.7.9 Update beta2
Wesnoth ≫ Battle For Wesnoth Version 1.7.10-1.8 Update beta3
Wesnoth ≫ Battle For Wesnoth Version 1.7.11-1.8 Update beta4
Wesnoth ≫ Battle For Wesnoth Version 1.7.12-1.8 Update beta5
Wesnoth ≫ Battle For Wesnoth Version 1.7.13-1.8 Update beta6
Wesnoth ≫ Battle For Wesnoth Version 1.7.14-1.8 Update beta7
Wesnoth ≫ Battle For Wesnoth Version 1.7.15-1.8 Update rc1
Wesnoth ≫ Battle For Wesnoth Version 1.8.0
Wesnoth ≫ Battle For Wesnoth Version 1.9.0
Wesnoth ≫ Battle For Wesnoth Version 1.9.1
Wesnoth ≫ Battle For Wesnoth Version 1.9.2
Wesnoth ≫ Battle For Wesnoth Version 1.9.3
Wesnoth ≫ Battle For Wesnoth Version 1.9.4
Wesnoth ≫ Battle For Wesnoth Version 1.9.5
Wesnoth ≫ Battle For Wesnoth Version 1.9.6
Wesnoth ≫ Battle For Wesnoth Version 1.9.7
Wesnoth ≫ Battle For Wesnoth Version 1.9.8
Wesnoth ≫ Battle For Wesnoth Version 1.9.9
Wesnoth ≫ Battle For Wesnoth Version 1.9.10
Wesnoth ≫ Battle For Wesnoth Version 1.9.11
Wesnoth ≫ Battle For Wesnoth Version 1.9.12
Wesnoth ≫ Battle For Wesnoth Version 1.9.13
Wesnoth ≫ Battle For Wesnoth Version 1.9.14
Wesnoth ≫ Battle For Wesnoth Version 1.10.0
Wesnoth ≫ Battle For Wesnoth Version 1.11.0
Wesnoth ≫ Battle For Wesnoth Version 1.11.1
Wesnoth ≫ Battle For Wesnoth Version 1.11.2
Wesnoth ≫ Battle For Wesnoth Version 1.11.3
Wesnoth ≫ Battle For Wesnoth Version 1.11.4
Wesnoth ≫ Battle For Wesnoth Version 1.11.5
Wesnoth ≫ Battle For Wesnoth Version 1.11.6
Wesnoth ≫ Battle For Wesnoth Version 1.11.7
Wesnoth ≫ Battle For Wesnoth Version 1.11.8
Wesnoth ≫ Battle For Wesnoth Version 1.11.9
Wesnoth ≫ Battle For Wesnoth Version 1.11.10
Wesnoth ≫ Battle For Wesnoth Version 1.11.11
Wesnoth ≫ Battle For Wesnoth Version 1.11.12
Wesnoth ≫ Battle For Wesnoth Version 1.11.13
Wesnoth ≫ Battle For Wesnoth Version 1.11.14
Wesnoth ≫ Battle For Wesnoth Version 1.11.15
Wesnoth ≫ Battle For Wesnoth Version 1.11.16
Wesnoth ≫ Battle For Wesnoth Version 1.11.17
Wesnoth ≫ Battle For Wesnoth Version 1.11.18
Wesnoth ≫ Battle For Wesnoth Version 1.11.19
Wesnoth ≫ Battle For Wesnoth Version 1.12.0
Wesnoth ≫ Battle For Wesnoth Version 1.12.1
Fedoraproject ≫ Fedora Version 20
Fedoraproject ≫ Fedora Version 21
Fedoraproject ≫ Fedora Version 22
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.31% 0.815
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://forums.wesnoth.org/viewtopic.php?t=41870
Vendor Advisory
http://forums.wesnoth.org/viewtopic.php?t=41872
Vendor Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155031.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/155968.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156001.html
http://www.debian.org/security/2015/dsa-3218