4 matches found
CVE-2024-30203
In Emacs versions prior to 29.3 , the Gnus component incorrectly treats inline MIME contents as trusted. This vulnerability stems from the MIME protocol implementation's inclusion of functions from unverified and uncontrolled areas. Exploitation of this flaw could allow a perpetrator to induce a ...
CVE-2024-30204
In Emacs versions prior to 29.3 , LaTeX preview is enabled by default for e-mail attachments. This configuration flaw allows for potential security risks when handling untrusted content. The vulnerability is mitigated by ensuring that LaTeX preview is disabled for e-mail attachments when untruste...
CVE-2024-30205
The GNU Emacs text editor contains a vulnerability where Org mode treats the contents of remote files as trusted. This affects Org Mode versions prior to 9.6.23 and Emacs versions before 29.3 . The root cause is the loading of code without checking its integrity, which could allow an attacker to ...
CVE-2024-30202
The GNU Emacs text editor is vulnerable to the execution of arbitrary Lisp code triggered when enabling Org mode . This issue affects Emacs versions prior to 29.3 and specifically impacts Org Mode versions before 9.6.23 . Impact details are not explicitly provided, but the vulnerability allows fo...