NVD

Id
42184  
Name
CVE-2012-0035  
Description
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-01-19  
Modified Date
2013-12-12  
Seq
2012-0035  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
212930 42184 CVE-2012-0035 FEDORA-2012-0462  View
212931 42184 CVE-2012-0035 FEDORA-2012-0494  View
212932 42184 CVE-2012-0035 [emacs-devel] 20120109 Security flaw in EDE; new release plans  View
212933 42184 CVE-2012-0035 [oss-security] 20120109 CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability  View
212934 42184 CVE-2012-0035 [oss-security] 20120109 Re: Re: CVE Request: CEDET/Emacs global-ede-mode file loading vulnerability  View
212935 42184 CVE-2012-0035 [cedet-devel] 20120109 Security flaw in EDE  View
212936 42184 CVE-2012-0035 [cedet-devel] 20120111 CEDET 1.0.1 available online  View
212937 42184 CVE-2012-0035 MDVSA-2013:076  View
212938 42184 CVE-2012-0035 USN-1586-1  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25453 JVNDB-2012-001160 GNU Emacs その他の製品で使用される CEDET の EDE における権限を取得される脆弱性 GNU Emacs その他の製品で使用される CEDET の EDE には、検索パスに関する処理に不備があるため、権限を取得される脆弱性が存在します。 CVE-2012-0035 53273 CVE-2012-0035 42184 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001160.html 2012-01-19 2012-11-05 View