CVE:CVE-2007-5742
CNNVD:CNNVD-200712-004
Wesnoth中的 WML engine处理程序存在目录遍历漏洞，远程攻击者可以借助不明向量中的".."序列读取任意文件。
solution:Upgrade wesnoth wesnoth to a higher version than 0.2.1,0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.5,0.5.1,0.6,0.6.1,0.6.99.1,0.6.99.2,0.6.99.3,0.6.99.4,0.6.99.5,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,1.0rcl,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8,and avoid the version 0.2.1,0.3,0.3.1,0.3.2,0.3.3,0.3.4,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.5,0.5.1,0.6,0.6.1,0.6.99.1,0.6.99.2,0.6.99.3,0.6.99.4,0.6.99.5,0.7,0.7.1,0.7.2,0.7.3,0.7.4,0.7.5,0.7.6,0.7.7,0.7.8,0.7.9,0.7.10,0.7.11,0.8,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.6,0.8.7,0.8.8,0.8.9,0.8.10,0.8.11,0.9.0,0.9.1,0.9.2,0.9.3,0.9.4,0.9.5,0.9.6,0.9.7,1.0rcl,1.1,1.1.1,1.1.2,1.1.3,1.1.4,1.1.5,1.1.6,1.1.7,1.1.8,1.1.9,1.1.10,1.1.11,1.1.12,1.1.13,1.1.14,1.2,1.2.1,1.2.2,1.2.3,1.2.4,1.2.5,1.2.6,1.2.7,1.2.8
solution:Upgrade sun openoffice.org to a higher version than 2.3.0,1.1.0,2.0.0,2.1.0,2.2.0,and avoid the version (,2.3.0],1.1.0,2.0.0,2.1.0,2.2.0