CVE-2012-0035

Related Files

Gentoo Linux Security Advisory 201812-05

Posted Dec 7, 2018

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201812-5 - A vulnerability in EDE could result in privilege escalation. Versions less than 1.07 are affected.

tags | advisory

systems | linux, gentoo

advisories | CVE-2012-0035

SHA-256 | b75b278290000e1676de892d54261e3697d2b3d0149574eab25d95baeed21d0b

Download | Favorite | View

Gentoo Linux Security Advisory 201403-05

Posted Mar 20, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201403-5 - Two vulnerabilities have been found in GNU Emacs, possibly leading to user-assisted execution of arbitrary code. Versions less than 24.1-r1 are affected.

tags | advisory, arbitrary, vulnerability

systems | linux, gentoo

advisories | CVE-2012-0035, CVE-2012-3479

SHA-256 | fcc71b90de871eaffab6688a5962d6a9a3a70a8af03b82173b7f3b5e9b07ba7f

Download | Favorite | View

Gentoo Linux Security Advisory 201401-31

Posted Jan 27, 2014

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory 201401-31 - A vulnerability in CEDET could result in privilege escalation. Versions less than 1.0.1 are affected.

tags | advisory

systems | linux, gentoo

advisories | CVE-2012-0035

SHA-256 | ab7bb490c3fd700b83a908871b299962a18eb2f3324acb6c787cf00e592551c1

Download | Favorite | View

Mandriva Linux Security Advisory 2013-076

Posted Apr 9, 2013

Authored by Mandriva | Site mandriva.com

Mandriva Linux Security Advisory 2013-076 - Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file. lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file. Additionally a problem was fixed reading xz compressed files.

tags | advisory, remote, arbitrary, local

systems | linux, mandriva

advisories | CVE-2012-0035, CVE-2012-3479

SHA-256 | 28aa6e68e7e28f1880a09b97dd7e6c76ad436e9eeee65f8ad82676881c69c8b8

Download | Favorite | View

Ubuntu Security Notice USN-1586-1

Posted Sep 27, 2012

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 1586-1 - Hiroshi Oota discovered that Emacs incorrectly handled search paths. If a user were tricked into opening a file with Emacs, a local attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Paul Ling discovered that Emacs incorrectly handled certain eval forms in local-variable sections. If a user were tricked into opening a specially crafted file with Emacs, a remote attacker could execute arbitrary Lisp code with the privileges of the user invoking the program. Various other issues were also addressed.

tags | advisory, remote, arbitrary, local

systems | linux, ubuntu

advisories | CVE-2012-0035, CVE-2012-3479, CVE-2012-0035, CVE-2012-3479

SHA-256 | e68c5c5c496cdf07a56ecb2cebeb00389e61b3d59a69baac3725b58811acc749

Download | Favorite | View