PT-2007-4143 · Gnu · Emacs

Publicado 2007-06-21 · Atualizado 2008-09-05 · CVE-2007-2833

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Emacs version 21

Description The issue allows user-assisted attackers to cause a denial of service, resulting in a crash, by using certain crafted images. This has been demonstrated using a GIF image in vm mode and is related to image size calculation.

Recommendations For Emacs version 21, consider avoiding the use of crafted images, especially GIF images in vm mode, until a fix is available. As a temporary workaround, restrict the processing of images to prevent potential crashes.

Correção

Identificadores relacionados

CVE-2007-2833

DSA-1316-1

Produtos afetados

Emacs

Referências · 10

• http://securityfocus.com/bid/24570 · Nota
• http://mandriva.com/security/advisories?name=MDKSA-2007:133 · Aviso do Fabricante
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408929 · Nota
• http://debian.org/security/2007/dsa-1316 · Aviso do Fabricante
• http://securitytracker.com/id?1018277 · Nota
• https://issues.rpath.com/browse/RPL-1490 · Nota
• http://novell.com/linux/security/advisories/2007_19_sr.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2833 · Nota de Segurança
• http://ubuntu.com/usn/usn-504-1 · Aviso do Fabricante
• http://secunia.com/advisories/26987 · Nota