Unscored severity · published Jan 19, 2012
CVE-2012-0035
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp…
–
CVSS
2.3%
EPSS
No
On KEV
Description
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.3% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CE
Cedet · Eric M Ludlam
through 1.0; 1.0; 1.0; 1.0; 1.0; 1.0; +4 more · source: NVD
EM
Emacs · Gnu
through 23.3; 20.0; 20.1; 20.2; 20.3; 20.4; +16 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0035
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0035
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html
lists.fedoraproject.org
http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html
Patch
http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
Patch
http://openwall.com/lists/oss-security/2012/01/10/2
openwall.com
http://openwall.com/lists/oss-security/2012/01/10/4
Vendor Advisory
http://secunia.com/advisories/47311