UbuntuUSN-607-1Emacs vulnerabilities
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
85.5%
Releases
- Ubuntu 8.04
- Ubuntu 7.10
- Ubuntu 7.04
- Ubuntu 6.06
Packages
- emacs21 -
- emacs22 -
Details
It was discovered that Emacs did not account for precision when formatting
integers. If a user were tricked into opening a specially crafted file, an
attacker could cause a denial of service or possibly other unspecified
actions. This issue does not affect Ubuntu 8.04. (CVE-2007-6109)
Steve Grubb discovered that the vcdiff script as included in Emacs created
temporary files in an insecure way when used with SCCS. Local users could
exploit a race condition to create or overwrite files with the privileges
of the user invoking the program. (CVE-2008-1694)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Ubuntu | 8.04 | noarch | emacs22 | <ย 22.1-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | emacs22-bin-common | <ย 22.1-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | emacs22-gtk | <ย 22.1-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 8.04 | noarch | emacs22-nox | <ย 22.1-0ubuntu10.1 | UNKNOWN |
| Ubuntu | 7.10 | noarch | emacs22 | <ย 22.1-0ubuntu5.2 | UNKNOWN |
| Ubuntu | 7.10 | noarch | emacs22-bin-common | <ย 22.1-0ubuntu5.2 | UNKNOWN |
| Ubuntu | 7.10 | noarch | emacs22-gtk | <ย 22.1-0ubuntu5.2 | UNKNOWN |
| Ubuntu | 7.10 | noarch | emacs22-nox | <ย 22.1-0ubuntu5.2 | UNKNOWN |
| Ubuntu | 7.04 | noarch | emacs21 | <ย 21.4a+1-2ubuntu1.2 | UNKNOWN |
| Ubuntu | 7.04 | noarch | emacs21-bin-common | <ย 21.4a+1-2ubuntu1.2 | UNKNOWN |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
85.5%