NetSight
IP …
medium5.0

CVE-2015-0844

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign …

Impact

The WML/Lua API in Battle for Wesnoth 1.7.x through 1.11.x and 1.12.x before 1.12.2 allows remote attackers to read arbitrary files via a crafted (1) campaign or (2) map file.

Affected products

VendorProductAffected versions
WesnothBattle For Wesnoth
Versions 1.7.0, 1.7.1, 1.7.2, 1.7.3, 1.7.4, 1.7.5
FedoraprojectFedora
Versions 20, 21, 22

Weakness classification

CWE-200

References