CVE-2012-0035
First published: Thu Jan 19 2012(Updated: )
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Eric M Ludlam Cedet | <=1.0 | |
| Eric M Ludlam Cedet | =1.0-beta1 | |
| Eric M Ludlam Cedet | =1.0-beta2 | |
| Eric M Ludlam Cedet | =1.0-beta3 | |
| Eric M Ludlam Cedet | =1.0-pre1 | |
| Eric M Ludlam Cedet | =1.0-pre2 | |
| Eric M Ludlam Cedet | =1.0-pre3 | |
| Eric M Ludlam Cedet | =1.0-pre4 | |
| Eric M Ludlam Cedet | =1.0-pre6 | |
| Eric M Ludlam Cedet | =1.0-pre7 | |
| GNU Emacs | <=23.3 | |
| GNU Emacs | =20.0 | |
| GNU Emacs | =20.1 | |
| GNU Emacs | =20.2 | |
| GNU Emacs | =20.3 | |
| GNU Emacs | =20.4 | |
| GNU Emacs | =20.5 | |
| GNU Emacs | =20.6 | |
| GNU Emacs | =20.7 | |
| GNU Emacs | =21 | |
| GNU Emacs | =21.1 | |
| GNU Emacs | =21.2 | |
| GNU Emacs | =21.2.1 | |
| GNU Emacs | =21.3 | |
| GNU Emacs | =21.3.1 | |
| GNU Emacs | =21.4 | |
| GNU Emacs | =22.1 | |
| GNU Emacs | =22.2 | |
| GNU Emacs | =22.3 | |
| GNU Emacs | =23.1 | |
| GNU Emacs | =23.2 | |
| GNU Emacs | =23.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html
- http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
- http://openwall.com/lists/oss-security/2012/01/10/2
- http://openwall.com/lists/oss-security/2012/01/10/4
- http://secunia.com/advisories/47311
- http://secunia.com/advisories/47515
- http://secunia.com/advisories/50801
- http://sourceforge.net/mailarchive/message.php?msg_id=28649762
- http://sourceforge.net/mailarchive/message.php?msg_id=28657612
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:076
- http://www.ubuntu.com/usn/USN-1586-1
- https://security.gentoo.org/glsa/201812-05
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- collector/nvd-index
- vendor/eric m ludlam
- canonical/eric m ludlam cedet
- version/eric m ludlam cedet/1.0
- version/eric m ludlam cedet/1.0-beta1
- version/eric m ludlam cedet/1.0-beta2
- version/eric m ludlam cedet/1.0-beta3
- version/eric m ludlam cedet/1.0-pre1
- version/eric m ludlam cedet/1.0-pre2
- version/eric m ludlam cedet/1.0-pre3
- version/eric m ludlam cedet/1.0-pre4
- version/eric m ludlam cedet/1.0-pre6
- version/eric m ludlam cedet/1.0-pre7
- vendor/gnu
- canonical/gnu emacs
- version/gnu emacs/23.3
- version/gnu emacs/20.0
- version/gnu emacs/20.1
- version/gnu emacs/20.2
- version/gnu emacs/20.3
- version/gnu emacs/20.4
- version/gnu emacs/20.5
- version/gnu emacs/20.6
- version/gnu emacs/20.7
- version/gnu emacs/21
- version/gnu emacs/21.1
- version/gnu emacs/21.2
- version/gnu emacs/21.2.1
- version/gnu emacs/21.3
- version/gnu emacs/21.3.1
- version/gnu emacs/21.4
- version/gnu emacs/22.1
- version/gnu emacs/22.2
- version/gnu emacs/22.3
- version/gnu emacs/23.1
- version/gnu emacs/23.2
- version/gnu emacs/23.4