PT-2007-4143 · Gnu · Emacs

Published 2007-06-21 · Updated 2008-09-05 · CVE-2007-2833

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Emacs version 21

Description The issue allows user-assisted attackers to cause a denial of service, resulting in a crash, by using certain crafted images. This has been demonstrated using a GIF image in vm mode and is related to image size calculation.

Recommendations For Emacs version 21, consider avoiding the use of crafted images, especially GIF images in vm mode, until a fix is available. As a temporary workaround, restrict the processing of images to prevent potential crashes.

Fix

Related Identifiers

CVE-2007-2833

DSA-1316-1

Affected Products

Emacs

References · 10

• http://mandriva.com/security/advisories?name=MDKSA-2007:133 · Vendor Advisory
• http://debian.org/security/2007/dsa-1316 · Vendor Advisory
• http://novell.com/linux/security/advisories/2007_19_sr.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2833 · Security Note
• http://ubuntu.com/usn/usn-504-1 · Vendor Advisory
• http://securityfocus.com/bid/24570 · Note
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408929 · Note
• http://securitytracker.com/id?1018277 · Note
• https://issues.rpath.com/browse/RPL-1490 · Note
• http://secunia.com/advisories/26987 · Note