Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2012-0035
HistoryJan 19, 2012 - 12:00 a.m.

CVE-2012-0035

2012-01-1900:00:00
ubuntu.com
ubuntu.com
5

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

51.1%

JSON

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used
in GNU Emacs before 23.4 and other products, allows local users to gain
privileges via a crafted Lisp expression in a Project.ede file in the
directory, or a parent directory, of an opened file.

Bugs

Notes

Author Note
sbeattie cedet was merged into emacs in 23.2
mdeslaur natty is too close to EoL to be worth difficult backport, ignoring
OSVersionArchitecturePackageVersionFilename
ubuntu11.10noarchemacs23< 23.3+1-1ubuntu4.1UNKNOWN
ubuntu12.04noarchemacs23< 23.3+1-1ubuntu9.1UNKNOWN

Related

gentoo 3
nessus 7
cve 1
openvas 10
fedora 3
nvd 1
kaspersky 1
prion 1
cvelist 1
ubuntu 1
gentoo
gentoo
EDE: Privilege escalation
2018-12-06 00:00:00
CEDET: Privilege escalation
2014-01-27 00:00:00
GNU Emacs: Multiple vulnerabilities
2014-03-20 00:00:00
nessus
nessus
Fedora 15 : emacs-23.3-8.fc15 (2012-0462)
2012-01-24 00:00:00
GLSA-201812-05 : EDE: Privilege escalation
2018-12-07 00:00:00
Fedora 16 : emacs-23.3-9.fc16 (2012-0494)
2012-01-24 00:00:00
cve
cve
CVE-2012-0035
2012-01-19 15:55:00
openvas
openvas
Fedora Update for emacs FEDORA-2012-0494
2012-04-02 00:00:00
Fedora Update for emacs FEDORA-2012-0462
2012-01-25 00:00:00
Fedora Update for emacs FEDORA-2012-0462
2012-01-25 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: emacs-23.3-9.fc16
2012-01-23 21:57:59
[SECURITY] Fedora 15 Update: emacs-23.3-8.fc15
2012-01-23 21:57:25
[SECURITY] Fedora 16 Update: emacs-23.3-10.fc16
2012-08-22 20:58:06
nvd
nvd
CVE-2012-0035
2012-01-19 15:55:00
kaspersky
kaspersky
KLA10170 LPE vulnerability in Emacs
2012-01-19 00:00:00
prion
prion
Design/Logic Flaw
2012-01-19 15:55:00
cvelist
cvelist
CVE-2012-0035
2012-01-19 15:00:00
ubuntu
ubuntu
Emacs vulnerabilities
2012-09-27 00:00:00

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

51.1%

JSON
Related for UB:CVE-2012-0035
gentoo3nessus7cve1openvas10fedora3nvd1kaspersky1prion1cvelist1ubuntu1