Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu emacs 20.6 vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2000-0269
Emacs 20 does not properly set permissions for a slave PTY device when starting a new subprocess, which allows local users to read or modify communications between Emacs and the subprocess.
Gnu Emacs 20.1Gnu Emacs 20.5Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 20.0
3.6
CVSSv2
CVE-2000-0270
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows malicious users to conduct a symlink attack.
Gnu Emacs 20.1Gnu Emacs 20.5Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 20.0
4.6
CVSSv2
CVE-2000-0271
read-passwd and other Lisp functions in Emacs 20 do not properly clear the history of recently typed keys, which allows an malicious user to read unencrypted passwords.
Gnu Emacs 20.1Gnu Emacs 20.5Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 20.0
9.3
CVSSv2
CVE-2012-0035
Untrusted search path vulnerability in EDE in CEDET prior to 1.0.1, as used in GNU Emacs prior to 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Eric M Ludlam Cedet 1.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 21.3Gnu Emacs 22.1Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 20.0Gnu Emacs 21Gnu Emacs 21.2.1Gnu Emacs 22.2Gnu Emacs 22.3Eric M Ludlam CedetGnu Emacs 20.5Gnu Emacs 20.6Gnu Emacs 21.3.1Gnu Emacs 21.4Gnu Emacs 20.3Gnu Emacs 20.4Gnu Emacs 20.7Gnu Emacs 21.1Gnu Emacs 21.2
3.3
CVSSv2
CVE-2014-3421
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
Mageia Project Mageia 4Mageia Project Mageia 3Gnu Emacs 20.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 22.2Gnu Emacs 22.3Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 23.3Gnu Emacs 21Gnu Emacs 21.1Gnu Emacs 21.2Gnu Emacs 21.2.1Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 21.3.1Gnu Emacs 22.1Gnu Emacs 24.1Gnu EmacsGnu Emacs 20.5
3.3
CVSSv2
CVE-2014-3424
lisp/net/tramp-sh.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.
Mageia Project Mageia 4Mageia Project Mageia 3Gnu Emacs 21.3.1Gnu Emacs 21.4Gnu Emacs 22.1Gnu Emacs 22.2Gnu Emacs 20.5Gnu Emacs 20.1Gnu Emacs 20.3Gnu Emacs 21.2Gnu Emacs 21.3Gnu Emacs 22.3Gnu Emacs 23.2Gnu Emacs 20.6Gnu Emacs 20.7Gnu Emacs 21Gnu Emacs 23.4Gnu Emacs 24.1Gnu Emacs 24.2Gnu EmacsGnu Emacs 20.0Gnu Emacs 20.2
3.3
CVSSv2
CVE-2014-3422
lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
Gnu Emacs 20.7Gnu Emacs 21Gnu Emacs 21.1Gnu Emacs 21.2Gnu EmacsGnu Emacs 20.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 22.2Gnu Emacs 22.3Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 20.3Gnu Emacs 20.5Gnu Emacs 21.3Gnu Emacs 21.4Gnu Emacs 23.4Gnu Emacs 24.2Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 21.2.1Gnu Emacs 21.3.1
3.3
CVSSv2
CVE-2014-3423
lisp/net/browse-url.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.
Mageia Project Mageia 3Mageia Project Mageia 4Gnu Emacs 21.1Gnu Emacs 21.2Gnu Emacs 21.2.1Gnu Emacs 21.3Gnu Emacs 20.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 22.3Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 23.3Gnu Emacs 20.5Gnu Emacs 20.7Gnu Emacs 21.4Gnu Emacs 22.2Gnu Emacs 23.4Gnu Emacs 24.2Gnu Emacs 20.4Gnu Emacs 20.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook