Lucene search

K
osvGoogleOSV:DSA-2603-1
HistoryJan 09, 2013 - 12:00 a.m.

emacs23 - programming error

2013-01-0900:00:00
Google
osv.dev
5

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

Paul Ling discovered that Emacs insufficiently restricted the evaluation
of Lisp code if enable-local-variables is set to safe.

For the stable distribution (squeeze), this problem has been fixed in
version 23.2+1-7+squeeze1.

For the testing distribution (wheezy), this problem has been fixed in
version 23.4+1-4.

For the unstable distribution (sid), this problem has been fixed in
version 23.4+1-4.

We recommend that you upgrade your emacs23 packages.

CPENameOperatorVersion
emacs23eq23.2+1-7

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P