Lucene search

K
nvd[email protected]NVD:CVE-2014-3423
HistoryMay 08, 2014 - 10:55 a.m.

CVE-2014-3423

2014-05-0810:55:05
CWE-59
web.nvd.nist.gov

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.

Affected configurations

NVD
Node
mageia_projectmageiaMatch3
OR
mageia_projectmageiaMatch4
Node
gnuemacsRange24.3
OR
gnuemacsMatch20.0
OR
gnuemacsMatch20.1
OR
gnuemacsMatch20.2
OR
gnuemacsMatch20.3
OR
gnuemacsMatch20.4
OR
gnuemacsMatch20.5
OR
gnuemacsMatch20.6
OR
gnuemacsMatch20.7
OR
gnuemacsMatch21
OR
gnuemacsMatch21.1
OR
gnuemacsMatch21.2
OR
gnuemacsMatch21.2.1
OR
gnuemacsMatch21.3
OR
gnuemacsMatch21.3.1
OR
gnuemacsMatch21.4
OR
gnuemacsMatch22.1
OR
gnuemacsMatch22.2
OR
gnuemacsMatch22.3
OR
gnuemacsMatch23.1
OR
gnuemacsMatch23.2
OR
gnuemacsMatch23.3
OR
gnuemacsMatch23.4
OR
gnuemacsMatch24.1
OR
gnuemacsMatch24.2

3.3 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

8.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%