CVE-2007-5795

Published: Nov 2, 2007Modified: Apr 23, 2026

6.3

Vector

AV:L/AC:M/Au:N/C:N/I:C/A:C

Exploitability: 3.4 / Impact: 9.2

Source: NVD

Description

The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.

Affected (1)

Products: Gnu: Emacs

1 product

Configuration A

1 platform

Running on/with	Platform Versions
Debian Debian Linux	All versions

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Emacs	Up to 22.1

References (38)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=197958

Source: secalert@redhat.com

http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28&r2=1.896.2.29

Source: secalert@redhat.com

http://docs.info.apple.com/article.html?artnum=307562

Source: secalert@redhat.com

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: secalert@redhat.com

http://osvdb.org/42060

Source: secalert@redhat.com

http://secunia.com/advisories/27508

Source: secalert@redhat.com

http://secunia.com/advisories/27627

Source: secalert@redhat.com

http://secunia.com/advisories/27728

Source: secalert@redhat.com

http://secunia.com/advisories/27984

Source: secalert@redhat.com

http://secunia.com/advisories/29420

Source: secalert@redhat.com

http://security.gentoo.org/glsa/glsa-200712-03.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:034

Source: secalert@redhat.com

http://www.securityfocus.com/bid/26327

Source: secalert@redhat.com

http://www.ubuntu.com/usn/usn-541-1

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2007/3715

Source: secalert@redhat.com

http://www.vupen.com/english/advisories/2008/0924/references

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38263

Source: secalert@redhat.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008

Source: af854a3a-2127-422b-91ae-364da2661108

http://bugs.gentoo.org/show_bug.cgi?id=197958

Source: af854a3a-2127-422b-91ae-364da2661108

http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28&r2=1.896.2.29

Source: af854a3a-2127-422b-91ae-364da2661108

http://docs.info.apple.com/article.html?artnum=307562

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://osvdb.org/42060

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27508

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27627

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27728

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/27984

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/29420

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-200712-03.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:034

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/26327

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/usn-541-1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2007/3715

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2008/0924/references

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/38263

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.