CVE-2017-1000383

2017-10-3120:00:00

mitre

www.cve.org

6.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

GNU Emacs version 25.3.1 (and other versions most likely) ignores umask when creating a backup save file (“[ORIGINAL_FILENAME]~”) resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary.