CVEvulnerability

CVE-2012-0035

9.3 HIGH Published 2012-01-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2012-01-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.

Affected configurations

• eric m ludlam cedet (<= 1.0) • eric m ludlam cedet 1.0 • gnu emacs (<= 23.3) • gnu emacs 20.0 • gnu emacs 20.1 • gnu emacs 20.2 • gnu emacs 20.3 • gnu emacs 20.4 • gnu emacs 20.5 • gnu emacs 20.6 • gnu emacs 20.7 • gnu emacs 21 • gnu emacs 21.1 • gnu emacs 21.2 • gnu emacs 21.2.1 • gnu emacs 21.3 • gnu emacs 21.3.1 • gnu emacs 21.4 • gnu emacs 22.1 • gnu emacs 22.2 • gnu emacs 22.3 • gnu emacs 23.1 • gnu emacs 23.2 • gnu emacs 23.4

References