CVE-2012-0035

Published: Jan 19, 2012Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.

Affected (32)

Products: Eric M Ludlam: Cedet · Gnu: Emacs

1 product

1 product

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Eric M Ludlam Cedet	Up to 1.0
Eric M Ludlam Cedet	Version 1.0 beta1
Eric M Ludlam Cedet	Version 1.0 beta2
Eric M Ludlam Cedet	Version 1.0 beta3
Eric M Ludlam Cedet	Version 1.0 pre1
Eric M Ludlam Cedet	Version 1.0 pre2
Eric M Ludlam Cedet	Version 1.0 pre3
Eric M Ludlam Cedet	Version 1.0 pre4
Eric M Ludlam Cedet	Version 1.0 pre6
Eric M Ludlam Cedet	Version 1.0 pre7
Gnu Emacs	Up to 23.3
Gnu Emacs	Version 20.0
Gnu Emacs	Version 20.1
Gnu Emacs	Version 20.2
Gnu Emacs	Version 20.3
Gnu Emacs	Version 20.4
Gnu Emacs	Version 20.5
Gnu Emacs	Version 20.6
Gnu Emacs	Version 20.7
Gnu Emacs	Version 21.1
Gnu Emacs	Version 21.2.1
Gnu Emacs	Version 21.2
Gnu Emacs	Version 21.3.1
Gnu Emacs	Version 21.3
Gnu Emacs	Version 21.4
Gnu Emacs	Version 21
Gnu Emacs	Version 22.1
Gnu Emacs	Version 22.2
Gnu Emacs	Version 22.3
Gnu Emacs	Version 23.1
Gnu Emacs	Version 23.2
Gnu Emacs	Version 23.4

References (26)

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html

Source: secalert@redhat.com

http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2012/01/10/2

Source: secalert@redhat.com

Patch

http://openwall.com/lists/oss-security/2012/01/10/4

Source: secalert@redhat.com

http://secunia.com/advisories/47311

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/47515

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/50801

Source: secalert@redhat.com

http://sourceforge.net/mailarchive/message.php?msg_id=28649762

Source: secalert@redhat.com

http://sourceforge.net/mailarchive/message.php?msg_id=28657612

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2013:076

Source: secalert@redhat.com

http://www.ubuntu.com/usn/USN-1586-1

Source: secalert@redhat.com

https://security.gentoo.org/glsa/201812-05

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2012/01/10/2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://openwall.com/lists/oss-security/2012/01/10/4

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47311

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/47515

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/50801

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/mailarchive/message.php?msg_id=28649762

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/mailarchive/message.php?msg_id=28657612

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2013:076

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-1586-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://security.gentoo.org/glsa/201812-05

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.