CVE Vulnerabilities

CVE-2012-0035

Published: Jan 19, 2012 | Modified: Dec 07, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
3.3 LOW
AV:L/AC:M/Au:N/C:P/I:P/A:N
RedHat/V3
Ubuntu
LOW

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.

Affected Software

Name Vendor Start Version End Version
Cedet Eric_m_ludlam * 1.0 (including)
Cedet Eric_m_ludlam 1.0-beta1 (including) 1.0-beta1 (including)
Cedet Eric_m_ludlam 1.0-beta2 (including) 1.0-beta2 (including)
Cedet Eric_m_ludlam 1.0-beta3 (including) 1.0-beta3 (including)
Cedet Eric_m_ludlam 1.0-pre1 (including) 1.0-pre1 (including)
Cedet Eric_m_ludlam 1.0-pre2 (including) 1.0-pre2 (including)
Cedet Eric_m_ludlam 1.0-pre3 (including) 1.0-pre3 (including)
Cedet Eric_m_ludlam 1.0-pre4 (including) 1.0-pre4 (including)
Cedet Eric_m_ludlam 1.0-pre6 (including) 1.0-pre6 (including)
Cedet Eric_m_ludlam 1.0-pre7 (including) 1.0-pre7 (including)
Emacs Gnu * 23.3 (including)
Emacs Gnu 20.0 (including) 20.0 (including)
Emacs Gnu 20.1 (including) 20.1 (including)
Emacs Gnu 20.2 (including) 20.2 (including)
Emacs Gnu 20.3 (including) 20.3 (including)
Emacs Gnu 20.4 (including) 20.4 (including)
Emacs Gnu 20.5 (including) 20.5 (including)
Emacs Gnu 20.6 (including) 20.6 (including)
Emacs Gnu 20.7 (including) 20.7 (including)
Emacs Gnu 21 (including) 21 (including)
Emacs Gnu 21.1 (including) 21.1 (including)
Emacs Gnu 21.2 (including) 21.2 (including)
Emacs Gnu 21.2.1 (including) 21.2.1 (including)
Emacs Gnu 21.3 (including) 21.3 (including)
Emacs Gnu 21.3.1 (including) 21.3.1 (including)
Emacs Gnu 21.4 (including) 21.4 (including)
Emacs Gnu 22.1 (including) 22.1 (including)
Emacs Gnu 22.2 (including) 22.2 (including)
Emacs Gnu 22.3 (including) 22.3 (including)
Emacs Gnu 23.1 (including) 23.1 (including)
Emacs Gnu 23.2 (including) 23.2 (including)
Emacs Gnu 23.4 (including) 23.4 (including)
Cedet Ubuntu hardy *
Cedet Ubuntu lucid *
Cedet Ubuntu maverick *
Emacs22 Ubuntu hardy *
Emacs23 Ubuntu natty *
Emacs23 Ubuntu oneiric *
Emacs23 Ubuntu precise *
Emacs23 Ubuntu upstream *

References