CVE-2015-5069 The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attacke...
MediumCVSS 4.3
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) filesystem::get_wml_location function in filesystem.cpp and (2) is_legal_file function in filesystem_boost.cpp in Battle for Wesnoth before 1.12.3 and 1.13.x before 1.13.1 allow remote attackers to obtain sensitive information via vectors related to inclusion of .pbl files from WML.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wesnoth battle for wesnoth | <= 1.12.2 | No fix listed |
| wesnoth battle for wesnoth | = 1.13.0 | No fix listed |
| fedoraproject fedora | = 21 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
References
- FEDORA-2015-10973 third-party-advisory vendor-advisory
- FEDORA-2015-10964 third-party-advisory vendor-advisory
- [oss-security] 20150625 Re: CVE request: Wesnoth authentication information disclosure mailing-list patch third-party-advisory vdb-entry
- 75424 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking third-party-advisory vdb-entry
- github.com patch third-party-advisory
- github.com release-notes third-party-advisory
- github.com release-notes third-party-advisory
- gna.org broken-link