PT-2012-2255 · Gnu · Gnu Emacs+1

David · Publicado 2012-01-19 · Atualizado 2024-06-15 · CVE-2012-0035

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CEDET versions prior to 1.0.1 GNU Emacs versions prior to 23.4

Description The issue allows local users to gain privileges via a crafted Lisp expression in a Project.ede file. This can occur when the file is located in the directory, or a parent directory, of an opened file.

Recommendations For CEDET versions prior to 1.0.1, update to version 1.0.1 or later. For GNU Emacs versions prior to 23.4, update to version 23.4 or later.

Correção

Identificadores relacionados

CVE-2012-0035

OPENSUSE-SU-2024:10469-1

Produtos afetados

Cedet

Gnu Emacs

Referências · 21

• https://osv.dev/vulnerability/openSUSE-SU-2024:10469-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3423 · Nota
• http://secunia.com/advisories/50801 · Nota
• http://sourceforge.net/mailarchive/message.php?msg_id=28649762 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-3422 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2013:076 · Aviso do Fabricante
• http://sourceforge.net/mailarchive/message.php?msg_id=28657612 · Nota
• http://secunia.com/advisories/47311 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2014-9483 · Nota
• https://suse.com/security/cve/CVE-2014-3421 · Nota
• https://security.gentoo.org/glsa/201812-05 · Aviso do Fabricante
• http://ubuntu.com/usn/USN-1586-1 · Aviso do Fabricante
• http://openwall.com/lists/oss-security/2012/01/10/4 · Nota