Emacs
by Emacs
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-30203 | Med | 0.36 | 5.5 | 0.01 | Mar 25, 2024 | In Emacs before 29.3, Gnus treats inline MIME contents as trusted. | ||
| CVE-2024-30204 | Low | 0.18 | 2.8 | 0.00 | Mar 25, 2024 | In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments. | ||
| CVE-2008-1694 | 0.00 | — | 0.00 | Apr 22, 2008 | vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files. | |||
| CVE-2005-0100 | 0.00 | — | 0.04 | Feb 7, 2005 | Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets. | |||
| CVE-2000-0270 | 0.00 | — | 0.00 | Apr 18, 2000 | The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack. |
- risk 0.36cvss 5.5epss 0.01
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
- risk 0.18cvss 2.8epss 0.00
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
- CVE-2008-1694Apr 22, 2008risk 0.00cvss —epss 0.00
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
- CVE-2005-0100Feb 7, 2005risk 0.00cvss —epss 0.04
Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.
- CVE-2000-0270Apr 18, 2000risk 0.00cvss —epss 0.00
The make-temp-name Lisp function in Emacs 20 creates temporary files with predictable names, which allows attackers to conduct a symlink attack.