406 matches found
Advisory ROSA-SA-2021-1828
Software: emacs 24.3 OS: Cobalt 7.9 CVE-ID: CVE-2014-3421 CVE-Crit: CRITICAL CVE-DESC: lisp / gnus / gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files using a symbolic link attack on the temporary file /tmp/gnus.face.ppm. CVE-STATUS: default CVE-REV: defaul...
Security Bulletin: A vulnerability in emacs affects PowerKVM
Summary PowerKVM is affected by a vulnerability in emacs. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-14482 DESCRIPTION: GNU Emacs could allow a remote attacker to execute arbitrary code on the system, caused by improper validation of user request. By sending a...
GLSA-201801-07 : GNU Emacs: Command injection
The remote host is affected by the vulnerability described in GLSA-201801-07 GNU Emacs: Command injection A command injection flaw within the Emacs enriched mode handling has been discovered. Impact : A remote attacker, by enticing a user to open a specially crafted file, could execute arbitrary...
GNU Emacs: Command injection
Background GNU Emacs is a highly extensible and customizable text editor. Description A command injection flaw within the Emacs “enriched mode” handling has been discovered. Impact A remote attacker, by enticing a user to open a specially crafted file, could execute arbitrary commands with the...
GNU Emacs Information Disclosure Vulnerability
GNU Emacs is a Unix text editor written in C developed by the GNU Project, which supports syntax highlighting, multiple languages and feature extensions. A security vulnerability exists in GNU Emacs version 25.3.1, which stems from the program's failure to use a mask when creating swap files. An...
Design/Logic Flaw
GNU Emacs version 25.3.1 and other versions most likely ignores umask when creating a backup save file "ORIGINALFILENAME" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary...
CVE-2017-1000383
GNU Emacs version 25.3.1 and other versions most likely ignores umask when creating a backup save file "ORIGINALFILENAME" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary...
CVE-2017-1000383
CVE-2017-1000383 affects GNU Emacs (notably version 25.3.1) and possibly other versions. The vulnerability stems from Emacs creating backup save files ("[ORIGINAL_FILENAME]~") without honoring the process umask, which can result in backup files being world-readable or otherwise exposed beyond the...
USN-3428-1: Emacs vulnerability
Charles A. Roelli discovered that Emacs incorrectly handled certain files. If a user were tricked into opening a specially crafted file e.g., email messages in gnus, an attacker could possibly use this to execute arbitrary code...
CentOS 7 : emacs (CESA-2017:2771)
An update for emacs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
RedHat Update for emacs RHSA-2017:2771-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: Red Hat Security Advisory: emacs security update
An update for emacs is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Design/Logic Flaw
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...
CVE-2017-14482
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...
CVE-2017-14482
GNU Emacs contains a command injection vulnerability in the enriched mode handling (CVE-2017-14482). The issue arises when rendering text/enriched MIME data in emails/news; a crafted message can cause arbitrary commands to execute with the privileges of the Emacs process. Exploitation requires th...
CVE-2017-14482
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...
Gentoo Security Advisory GLSA 201403-05
Gentoo Linux Local Security Checks GLSA 201403-05 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...
GNU Emacs Local Information Disclosure Vulnerability
Emacs is an extensible real-time display editor. A local information disclosure vulnerability exists in GNU Emacs, which allows attackers to exploit the vulnerability to obtain sensitive information...
Info2www 1.0/1.1 CGI Input Handling Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1995/info The info2www script allows HTTP access to information stored in GNU EMACS Info Nodes. This script fails to properly parse input and can be used to execute commands on the server with permissions of the web serve...
