CVE

Id
53278  
CVE No.
CVE-2012-0035  
Status
Candidate  
Description
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.  
Phase
Assigned (20111207)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
563007 53278 CVE-2012-0035 MLIST:[cedet-devel] 20120109 Security flaw in EDE  View
563008 53278 CVE-2012-0035 URL:http://sourceforge.net/mailarchive/message.php?msg_id=28649762  View
563009 53278 CVE-2012-0035 MLIST:[cedet-devel] 20120111 CEDET 1.0.1 available online  View
563010 53278 CVE-2012-0035 URL:http://sourceforge.net/mailarchive/message.php?msg_id=28657612  View
563011 53278 CVE-2012-0035 MLIST:[emacs-devel] 20120109 Security flaw in EDE; new release plans  View
563012 53278 CVE-2012-0035 URL:http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html  View
563013 53278 CVE-2012-0035 MLIST:[oss-security] 20120109 Re: Re: CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability  View
563014 53278 CVE-2012-0035 URL:http://openwall.com/lists/oss-security/2012/01/10/4  View
563015 53278 CVE-2012-0035 MLIST:[oss-security] 20120109 CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability  View
563016 53278 CVE-2012-0035 URL:http://openwall.com/lists/oss-security/2012/01/10/2  View
563017 53278 CVE-2012-0035 FEDORA:FEDORA-2012-0462  View
563018 53278 CVE-2012-0035 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html  View
563019 53278 CVE-2012-0035 FEDORA:FEDORA-2012-0494  View
563020 53278 CVE-2012-0035 URL:http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html  View
563021 53278 CVE-2012-0035 MANDRIVA:MDVSA-2013:076  View
563022 53278 CVE-2012-0035 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2013:076  View
563023 53278 CVE-2012-0035 UBUNTU:USN-1586-1  View
563024 53278 CVE-2012-0035 URL:http://www.ubuntu.com/usn/USN-1586-1  View
563025 53278 CVE-2012-0035 SECUNIA:47311  View
563026 53278 CVE-2012-0035 URL:http://secunia.com/advisories/47311  View
563027 53278 CVE-2012-0035 SECUNIA:47515  View
563028 53278 CVE-2012-0035 URL:http://secunia.com/advisories/47515  View
563029 53278 CVE-2012-0035 SECUNIA:50801  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25476 JVNDB-2012-001183 SimpleSAMLphp の modules/core/www/no_cookie.php におけるクロスサイトスクリプティングの脆弱性 SimpleSAMLphp の modules/core/www/no_cookie.php には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-0040 53278 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001183.html  View