Lucene search

K
kasperskyKaspersky LabKLA10169
HistoryMay 08, 2014 - 12:00 a.m.

KLA10169 WLF vulnerability in Emacs

2014-05-0800:00:00
Kaspersky Lab
threats.kaspersky.com
18

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

Detect date:

05/08/2014

Severity:

Warning

Description:

An unspecified vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can overwrite arbitrary tmp files. This vulnerability can be exploited locally via a symlink attack.

Affected products:

GNU Emacs versions 24.3 and earlier

Solution:

Update to latest version

Impacts:

WLF

Related products:

GNU Emacs

CVE-IDS:

CVE-2014-34243.3Warning
CVE-2014-34233.3Warning
CVE-2014-34223.3Warning
CVE-2014-34213.3Warning

3.3 Low

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%