Lucene search

[email protected]NVD:CVE-2012-1103

HistorySep 25, 2012 - 11:55 p.m.

CVE-2012-1103

2012-09-2523:55:01

CWE-20

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.014

Percentile

86.6%

JSON

emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message.

Affected configurations

Nvd

Node

notmuchmailnotmuchRange≤0.11

notmuchmailnotmuchMatch0.1

notmuchmailnotmuchMatch0.1.1

notmuchmailnotmuchMatch0.2

notmuchmailnotmuchMatch0.3

notmuchmailnotmuchMatch0.3.1

notmuchmailnotmuchMatch0.4

notmuchmailnotmuchMatch0.5

notmuchmailnotmuchMatch0.6

notmuchmailnotmuchMatch0.6254

notmuchmailnotmuchMatch0.6rc1

notmuchmailnotmuchMatch0.6.1

notmuchmailnotmuchMatch0.7

notmuchmailnotmuchMatch0.7rc1

notmuchmailnotmuchMatch0.8

notmuchmailnotmuchMatch0.8rc0

notmuchmailnotmuchMatch0.8rc1

notmuchmailnotmuchMatch0.9

notmuchmailnotmuchMatch0.9rc1

notmuchmailnotmuchMatch0.9rc2

notmuchmailnotmuchMatch0.10

notmuchmailnotmuchMatch0.10rc1

notmuchmailnotmuchMatch0.10rc2

notmuchmailnotmuchMatch0.10.1

notmuchmailnotmuchMatch0.10.2

notmuchmailnotmuchMatch0.11rc1

notmuchmailnotmuchMatch0.11rc2

notmuchmailnotmuchMatch0.11rc2-1

notmuchmailnotmuchMatch0.11rc3

notmuchmailnotmuchMatch0.11rc3-1

AND

gnuemacsMatch-

VendorProductVersionCPE
notmuchmailnotmuch*cpe:2.3:a:notmuchmail:notmuch:*:*:*:*:*:*:*:*
notmuchmailnotmuch0.1cpe:2.3:a:notmuchmail:notmuch:0.1:*:*:*:*:*:*:*
notmuchmailnotmuch0.1.1cpe:2.3:a:notmuchmail:notmuch:0.1.1:*:*:*:*:*:*:*
notmuchmailnotmuch0.2cpe:2.3:a:notmuchmail:notmuch:0.2:*:*:*:*:*:*:*
notmuchmailnotmuch0.3cpe:2.3:a:notmuchmail:notmuch:0.3:*:*:*:*:*:*:*
notmuchmailnotmuch0.3.1cpe:2.3:a:notmuchmail:notmuch:0.3.1:*:*:*:*:*:*:*
notmuchmailnotmuch0.4cpe:2.3:a:notmuchmail:notmuch:0.4:*:*:*:*:*:*:*
notmuchmailnotmuch0.5cpe:2.3:a:notmuchmail:notmuch:0.5:*:*:*:*:*:*:*
notmuchmailnotmuch0.6cpe:2.3:a:notmuchmail:notmuch:0.6:*:*:*:*:*:*:*
notmuchmailnotmuch0.6cpe:2.3:a:notmuchmail:notmuch:0.6:254:*:*:*:*:*:*

Vendor	Product	Version	CPE
notmuchmail	notmuch	*	cpe:2.3:a:notmuchmail:notmuch::::::::
notmuchmail	notmuch	0.1	cpe:2.3:a:notmuchmail:notmuch:0.1:::::::*
notmuchmail	notmuch	0.1.1	cpe:2.3:a:notmuchmail:notmuch:0.1.1:::::::*
notmuchmail	notmuch	0.2	cpe:2.3:a:notmuchmail:notmuch:0.2:::::::*
notmuchmail	notmuch	0.3	cpe:2.3:a:notmuchmail:notmuch:0.3:::::::*
notmuchmail	notmuch	0.3.1	cpe:2.3:a:notmuchmail:notmuch:0.3.1:::::::*
notmuchmail	notmuch	0.4	cpe:2.3:a:notmuchmail:notmuch:0.4:::::::*
notmuchmail	notmuch	0.5	cpe:2.3:a:notmuchmail:notmuch:0.5:::::::*
notmuchmail	notmuch	0.6	cpe:2.3:a:notmuchmail:notmuch:0.6:::::::*
notmuchmail	notmuch	0.6	cpe:2.3:a:notmuchmail:notmuch:0.6:254::::::