CVE-2012-0035
Published: 19 January 2012
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Notes
Author | Note |
---|---|
sbeattie | cedet was merged into emacs in 23.2 |
mdeslaur | natty is too close to EoL to be worth difficult backport, ignoring |
Priority
Status
Package | Release | Status |
---|---|---|
cedet Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
lucid |
Ignored
(end of life)
|
|
maverick |
Ignored
(end of life)
|
|
natty |
Does not exist
|
|
oneiric |
Does not exist
|
|
precise |
Does not exist
|
|
quantal |
Does not exist
|
|
raring |
Does not exist
|
|
saucy |
Does not exist
|
|
upstream |
Needs triage
|
|
emacs22 Launchpad, Ubuntu, Debian |
hardy |
Ignored
(end of life)
|
lucid |
Not vulnerable
(pre-cedec merge)
|
|
maverick |
Not vulnerable
(pre-cedec merge)
|
|
natty |
Does not exist
|
|
oneiric |
Does not exist
|
|
precise |
Does not exist
|
|
quantal |
Does not exist
|
|
raring |
Does not exist
|
|
saucy |
Does not exist
|
|
upstream |
Needs triage
|
|
emacs23 Launchpad, Ubuntu, Debian |
hardy |
Does not exist
|
lucid |
Not vulnerable
(pre-cedec merge)
|
|
maverick |
Not vulnerable
(pre-cedec merge)
|
|
natty |
Ignored
|
|
oneiric |
Released
(23.3+1-1ubuntu4.1)
|
|
precise |
Released
(23.3+1-1ubuntu9.1)
|
|
quantal |
Not vulnerable
(23.4+1-3ubuntu2)
|
|
raring |
Not vulnerable
(23.4+1-3ubuntu2)
|
|
saucy |
Not vulnerable
(23.4+1-3ubuntu2)
|
|
upstream |
Released
(23.3+1-5)
|
|
Patches: upstream: http://bzr.savannah.gnu.org/lh/emacs/emacs-23/revision/100631 |