Lucene search

Ubuntu.comUB:CVE-2012-0035

HistoryJan 19, 2012 - 12:00 a.m.

CVE-2012-0035

2012-01-1900:00:00

ubuntu.com

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

51.0%

JSON

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used
in GNU Emacs before 23.4 and other products, allows local users to gain
privileges via a crafted Lisp expression in a Project.ede file in the
directory, or a parent directory, of an opened file.

Bugs

<http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=655299>

Notes

Author	Note
sbeattie	cedet was merged into emacs in 23.2
mdeslaur	natty is too close to EoL to be worth difficult backport, ignoring

OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchemacs23< 23.3+1-1ubuntu4.1UNKNOWN
ubuntu12.04noarchemacs23< 23.3+1-1ubuntu9.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	11.10	noarch	emacs23	< 23.3+1-1ubuntu4.1	UNKNOWN
ubuntu	12.04	noarch	emacs23	< 23.3+1-1ubuntu9.1	UNKNOWN

References

launchpad.net/bugs/cve/CVE-2012-0035

nvd.nist.gov/vuln/detail/CVE-2012-0035

security-tracker.debian.org/tracker/CVE-2012-0035

ubuntu.com/security/notices/USN-1586-1

www.cve.org/CVERecord?id=CVE-2012-0035

9.3 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

51.0%

JSON

Related for UB:CVE-2012-0035