Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2017-14482HistorySep 14, 2017 - 4:29 p.m.
CVE-2017-14482
2017-09-1416:29:00
Debian Security Bug Tracker
security-tracker.debian.org
12
0.031 Low
EPSS
Percentile
91.2%
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted “Content-Type: text/enriched” data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe Gnus support for enriched and richtext inline MIME objects in lisp/gnus/mm-view.el. In particular, an Emacs user can be instantly compromised by reading a crafted email message (or Usenet news article).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | emacs24 | < 24.5+1-11+deb9u1 | emacs24_24.5+1-11+deb9u1_all.deb |
| Debian | 9 | all | emacs25 | < 25.1+1-4+deb9u1 | emacs25_25.1+1-4+deb9u1_all.deb |
Related
nessus
nessus
Debian DSA-3970-1 : emacs24 - security update
2017-09-13 00:00:00
Fedora 26 : 1:emacs (2017-a1dc0ef38c)
2017-09-14 00:00:00
SUSE SLES11 Security Update : emacs (SUSE-SU-2017:2532-1)
2017-09-21 00:00:00
suse
suse
Security update for emacs (important)
2017-09-21 03:07:15
Security update for emacs (important)
2017-09-20 18:09:19
Security update for emacs (important)
2017-09-20 15:08:02
openvas
openvas
Debian: Security Advisory (DSA-3975-1)
2017-09-14 00:00:00
Ubuntu: Security Advisory (USN-3428-1)
2018-10-26 00:00:00
SUSE: Security Advisory (SUSE-SU-2017:2529-1)
2021-04-19 00:00:00
canvas
canvas
Immunity Canvas: EMACS_ENRICHED
2017-09-14 16:29:00
fedora
fedora
[SECURITY] Fedora 25 Update: perl-Image-SubImageFind-0.03-13.fc25
2017-09-19 15:25:17
[SECURITY] Fedora 25 Update: rubygem-rmagick-2.16.0-4.fc25.2
2017-09-19 15:25:21
[SECURITY] Fedora 25 Update: rss-glx-0.9.1.p-27.fc25.1
2017-09-19 15:25:20
debian
debian
[SECURITY] [DLA 1101-1] emacs23 security update
2017-09-21 19:50:29
[SECURITY] [DSA 3975-1] emacs25 security update
2017-09-15 21:21:38
ubuntu
ubuntu
Emacs vulnerability
2017-09-21 00:00:00
Emacs vulnerability
2017-09-21 00:00:00
redhat
redhat
(RHSA-2017:2771) Important: emacs security update
2017-09-19 17:47:10
ibm
ibm
Security Bulletin: A vulnerability in emacs affects PowerKVM
2018-06-18 01:38:34
prion
prion
Design/Logic Flaw
2017-09-14 16:29:00
cve
cve
CVE-2017-14482
2017-09-14 16:29:00
gentoo
gentoo
GNU Emacs: Command injection
2018-01-07 00:00:00
amazon
amazon
Important: emacs
2017-10-12 20:38:00
redhatcve
redhatcve
CVE-2017-14482
2017-09-15 07:48:36
ubuntucve
ubuntucve
CVE-2017-14482
2017-09-14 00:00:00
osv
osv
emacs24 - security update
2017-09-12 00:00:00
CVE-2017-14482
2017-09-14 16:29:00
emacs25 - security update
2017-09-15 00:00:00
nvd
nvd
CVE-2017-14482
2017-09-14 16:29:00
oraclelinux
oraclelinux
emacs security update
2017-09-19 00:00:00
centos
centos
emacs security update
2017-09-20 12:06:23
mageia
mageia
Updated emacs packages fix security vulnerability
2017-12-31 03:10:15
cvelist
cvelist
CVE-2017-14482
2017-09-14 16:00:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1828
2021-07-02 16:39:27