Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
CVSS Details
- CVSS 3.1 Base Score: 8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Gentoo Linux | — | Upgrade app-emacs/cedet.Upgrade app-editors/emacs.Upgrade app-xemacs/ede. | Oct 30, 2017 | Jan 19, 2012 |
| Suse | — | Upgrade emacs-x11Upgrade emacsUpgrade emacs-infoUpgrade emacs-elnUpgrade emacs-elUpgrade emacs-noxUpgrade etags | Aug 9, 2024 | Jun 28, 2013 |
| Ubuntu | — | Upgrade emacs23Upgrade emacs23-common | Nov 8, 2024 | Jan 19, 2012 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub