Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu emacs 23.4 vulnerabilities and exploits

(subscribe to this query)
6.8
CVSSv2
CVE-2012-3479
lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote malicious users to execute arbitrary Emacs Lisp code via a crafted file.
Gnu Emacs 23.2Gnu Emacs 23.3Gnu Emacs 23.4Gnu Emacs 24.1
9.3
CVSSv2
CVE-2012-0035
Untrusted search path vulnerability in EDE in CEDET prior to 1.0.1, as used in GNU Emacs prior to 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Eric M Ludlam Cedet 1.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 21.3Gnu Emacs 22.1Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 20.0Gnu Emacs 21Gnu Emacs 21.2.1Gnu Emacs 22.2Gnu Emacs 22.3Eric M Ludlam CedetGnu Emacs 20.5Gnu Emacs 20.6Gnu Emacs 21.3.1Gnu Emacs 21.4Gnu Emacs 20.3Gnu Emacs 20.4Gnu Emacs 20.7Gnu Emacs 21.1Gnu Emacs 21.2
3.3
CVSSv2
CVE-2014-3421
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
Mageia Project Mageia 4Mageia Project Mageia 3Gnu Emacs 20.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 22.2Gnu Emacs 22.3Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 23.3Gnu Emacs 21Gnu Emacs 21.1Gnu Emacs 21.2Gnu Emacs 21.2.1Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 21.3.1Gnu Emacs 22.1Gnu Emacs 24.1Gnu EmacsGnu Emacs 20.5
3.3
CVSSv2
CVE-2014-3424
lisp/net/tramp-sh.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a /tmp/tramp.##### temporary file.
Mageia Project Mageia 4Mageia Project Mageia 3Gnu Emacs 21.3.1Gnu Emacs 21.4Gnu Emacs 22.1Gnu Emacs 22.2Gnu Emacs 20.5Gnu Emacs 20.1Gnu Emacs 20.3Gnu Emacs 21.2Gnu Emacs 21.3Gnu Emacs 22.3Gnu Emacs 23.2Gnu Emacs 20.6Gnu Emacs 20.7Gnu Emacs 21Gnu Emacs 23.4Gnu Emacs 24.1Gnu Emacs 24.2Gnu EmacsGnu Emacs 20.0Gnu Emacs 20.2
3.3
CVSSv2
CVE-2014-3422
lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.
Gnu Emacs 20.7Gnu Emacs 21Gnu Emacs 21.1Gnu Emacs 21.2Gnu EmacsGnu Emacs 20.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 22.2Gnu Emacs 22.3Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 20.3Gnu Emacs 20.5Gnu Emacs 21.3Gnu Emacs 21.4Gnu Emacs 23.4Gnu Emacs 24.2Gnu Emacs 20.4Gnu Emacs 20.6Gnu Emacs 21.2.1Gnu Emacs 21.3.1
3.3
CVSSv2
CVE-2014-3423
lisp/net/browse-url.el in GNU Emacs 24.3 and previous versions allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.
Mageia Project Mageia 3Mageia Project Mageia 4Gnu Emacs 21.1Gnu Emacs 21.2Gnu Emacs 21.2.1Gnu Emacs 21.3Gnu Emacs 20.0Gnu Emacs 20.1Gnu Emacs 20.2Gnu Emacs 20.3Gnu Emacs 22.3Gnu Emacs 23.1Gnu Emacs 23.2Gnu Emacs 23.3Gnu Emacs 20.5Gnu Emacs 20.7Gnu Emacs 21.4Gnu Emacs 22.2Gnu Emacs 23.4Gnu Emacs 24.2Gnu Emacs 20.4Gnu Emacs 20.6
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
encryptionCVE-2024-4331CVE-2024-26925arbitrary codeCVE-2006-4304CVE-2024-25458CVE-2024-27077reflected XSSCVE-2024-4059
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook