CVE-2012-3479
25.08.2012, 10:29
lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gnu | emacs | 23.2 |
| gnu | emacs | 23.3 |
| gnu | emacs | 23.4 |
| gnu | emacs | 24.1 |
𝑥
= Vulnerable software versions
Ubuntu Releases
Ubuntu Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| emacs-snapshot |
| ||||||||||||||||
| emacs21 |
| ||||||||||||||||
| emacs22 |
| ||||||||||||||||
| emacs23 |
| ||||||||||||||||
| emacs24 |
| ||||||||||||||||
| xemacs21 |
|