PT-2012-2255 · Gnu · Gnu Emacs+1

David · Published 2012-01-19 · Updated 2024-06-15 · CVE-2012-0035

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CEDET versions prior to 1.0.1 GNU Emacs versions prior to 23.4

Description The issue allows local users to gain privileges via a crafted Lisp expression in a Project.ede file. This can occur when the file is located in the directory, or a parent directory, of an opened file.

Recommendations For CEDET versions prior to 1.0.1, update to version 1.0.1 or later. For GNU Emacs versions prior to 23.4, update to version 23.4 or later.

Fix

Related Identifiers

CVE-2012-0035

OPENSUSE-SU-2024:10469-1

Affected Products

Cedet

Gnu Emacs

References · 21

• https://osv.dev/vulnerability/openSUSE-SU-2024:10469-1 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:076 · Vendor Advisory
• http://secunia.com/advisories/47311 · Vendor Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html · Vendor Advisory
• https://security.gentoo.org/glsa/201812-05 · Vendor Advisory
• http://ubuntu.com/usn/USN-1586-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0035 · Security Note
• http://secunia.com/advisories/47515 · Vendor Advisory
• http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html · Patch
• http://openwall.com/lists/oss-security/2012/01/10/2 · Patch
• https://suse.com/security/cve/CVE-2014-3423 · Note
• http://secunia.com/advisories/50801 · Note
• http://sourceforge.net/mailarchive/message.php?msg_id=28649762 · Note
• https://suse.com/security/cve/CVE-2014-3422 · Note