55 matches found
DEBIAN-CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
AZL-37081 CVE-2024-30203 affecting package emacs for versions less than 29.3-1
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
AZL-37104 CVE-2024-30203 affecting package emacs for versions less than 29.3-1
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
UBUNTU-CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
CVE-2024-30203
In Emacs before 29.3, Gnus treats inline MIME contents as trusted...
GNU Emacs 安全漏洞
GNU Emacs is a family of text editors in the American GNU community. A security vulnerability existed prior to GNU Emacs version 29.3, which stemmed from Gnus treating inline MIME content as trusted...
SUSE CVE-2014-3421
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file...
SUSE CVE-2017-14482
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...
UBUNTU-CVE-2017-14482
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe...
UBUNTU-CVE-2014-3421
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file...
Debian Security Advisory DSA 957-1 (imagemagick)
The remote host is missing an update to imagemagick announced via advisory DSA 957-1. Florian Weimer discovered that delegate code in ImageMagick is vulnerable to shell command injection using specially crafted file names. This allows attackers to encode commands inside of graphic commands. With...
Ubuntu 4.10 / 5.04 / 5.10 : imagemagick vulnerabilities (USN-246-1)
Florian Weimer discovered that the delegate code did not correctly handle file names which embed shell commands CVE-2005-4601. Daniel Kobras found a format string vulnerability in the SetImageInfo function CVE-2006-0082. By tricking a user into processing an image file with a specially crafted fi...
DSA-957-2 imagemagick - missing shell meta sanitising
Bulletin has no description...