Lucene search

K
nvd[email protected]NVD:CVE-2012-0035
HistoryJan 19, 2012 - 3:55 p.m.

CVE-2012-0035

2012-01-1915:55:00
web.nvd.nist.gov

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.

Affected configurations

NVD
Node
eric_m_ludlamcedetRange1.0
OR
eric_m_ludlamcedetMatch1.0beta1
OR
eric_m_ludlamcedetMatch1.0beta2
OR
eric_m_ludlamcedetMatch1.0beta3
OR
eric_m_ludlamcedetMatch1.0pre1
OR
eric_m_ludlamcedetMatch1.0pre2
OR
eric_m_ludlamcedetMatch1.0pre3
OR
eric_m_ludlamcedetMatch1.0pre4
OR
eric_m_ludlamcedetMatch1.0pre6
OR
eric_m_ludlamcedetMatch1.0pre7
OR
gnuemacsRange23.3
OR
gnuemacsMatch20.0
OR
gnuemacsMatch20.1
OR
gnuemacsMatch20.2
OR
gnuemacsMatch20.3
OR
gnuemacsMatch20.4
OR
gnuemacsMatch20.5
OR
gnuemacsMatch20.6
OR
gnuemacsMatch20.7
OR
gnuemacsMatch21
OR
gnuemacsMatch21.1
OR
gnuemacsMatch21.2
OR
gnuemacsMatch21.2.1
OR
gnuemacsMatch21.3
OR
gnuemacsMatch21.3.1
OR
gnuemacsMatch21.4
OR
gnuemacsMatch22.1
OR
gnuemacsMatch22.2
OR
gnuemacsMatch22.3
OR
gnuemacsMatch23.1
OR
gnuemacsMatch23.2
OR
gnuemacsMatch23.4

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.1%