CVEvulnerability

CVE-2014-3423

3.3 LOW Published 2014-05-08 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-05-08
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.3 LOW — AV:L/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-59

Description

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.

Affected configurations

• mageia project mageia 3 • mageia project mageia 4 • gnu emacs (<= 24.3) • gnu emacs 20.0 • gnu emacs 20.1 • gnu emacs 20.2 • gnu emacs 20.3 • gnu emacs 20.4 • gnu emacs 20.5 • gnu emacs 20.6 • gnu emacs 20.7 • gnu emacs 21 • gnu emacs 21.1 • gnu emacs 21.2 • gnu emacs 21.2.1 • gnu emacs 21.3 • gnu emacs 21.3.1 • gnu emacs 21.4 • gnu emacs 22.1 • gnu emacs 22.2 • gnu emacs 22.3 • gnu emacs 23.1 • gnu emacs 23.2 • gnu emacs 23.3 • gnu emacs 23.4 • gnu emacs 24.1 • gnu emacs 24.2

Related

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References