CVE-2011-4675

Name of the Vulnerable Software and Affected Versions Widelands versions prior to 15.1

Description The pathname canonicalization functionality in Widelands does not properly restrict the use of leading ~ (tilde) characters in strings received from the network, potentially allowing remote attackers to conduct absolute path traversal attacks and overwrite arbitrary files via a ~ in a pathname used for a file transfer in an Internet game.

Recommendations For versions prior to 15.1, update to version 15.1 or later to resolve the issue.