CVE-2024-30204

nvd nist

Published: Mar 25, 2024Modified: May 1, 2025

2.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L

Exploitability: 1.3 / Impact: 1.4

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.

Affected (3)

Products: Gnu: Emacs, Org Mode · Debian: Debian Linux

2 products

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Emacs	Before 29.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Gnu Org Mode	Before 9.6.23

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0

Related CWEs

CWE-276

Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

References (28)

http://www.openwall.com/lists/oss-security/2024/03/25/2

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/3

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/4

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/6

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/08/7

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/3

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/4

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/5

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/10/6

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/04/11/4

Source: cve@mitre.org

Mailing List

https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c

Source: cve@mitre.org

Patch

https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29

Source: cve@mitre.org

Release Notes

https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html

Source: cve@mitre.org

Mailing List

https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html

Source: cve@mitre.org

Mailing List

http://www.openwall.com/lists/oss-security/2024/03/25/2