Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.
CVSS Details
- CVSS 3.1 Base Score: 9.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xemacs21 | Jul 30, 2024 | Feb 7, 2005 |
| Freebsd | — | Upgrade zh-xemacs-muleUpgrade hanemacsUpgrade xemacsUpgrade xemacs-devel-21.5Upgrade zh-emacsUpgrade movemailUpgrade xemacs-devel-muleUpgrade xemacs-develUpgrade xemacs-muleUpgrade zh-xemacsUpgrade emacsUpgrade mule-common | Dec 10, 2025 | Feb 14, 2005 |
| Gentoo Linux | — | Upgrade app-editors/emacs.Upgrade app-editors/xemacs. | Oct 30, 2017 | Feb 7, 2005 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub