Lucene search

MitreCVE-2014-3423

HistoryMay 08, 2014 - 10:55 a.m.

CVE-2014-3423

2014-05-0810:55:05

CWE-59

mitre

web.nvd.nist.gov

cve-2014-3423

gnu emacs

symlink attack

local file overwrite

security vulnerability

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

AI Score

Confidence

Low

EPSS

Percentile

5.1%

JSON

lisp/net/browse-url.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a /tmp/Mosaic.##### temporary file.

Affected configurations

Nvd

Node

mageia_projectmageiaMatch3

mageia_projectmageiaMatch4

Node

gnuemacsRange≤24.3

gnuemacsMatch20.0

gnuemacsMatch20.1

gnuemacsMatch20.2

gnuemacsMatch20.3

gnuemacsMatch20.4

gnuemacsMatch20.5

gnuemacsMatch20.6

gnuemacsMatch20.7

gnuemacsMatch21

gnuemacsMatch21.1

gnuemacsMatch21.2

gnuemacsMatch21.2.1

gnuemacsMatch21.3

gnuemacsMatch21.3.1

gnuemacsMatch21.4

gnuemacsMatch22.1

gnuemacsMatch22.2

gnuemacsMatch22.3

gnuemacsMatch23.1

gnuemacsMatch23.2

gnuemacsMatch23.3

gnuemacsMatch23.4

gnuemacsMatch24.1

gnuemacsMatch24.2

VendorProductVersionCPE
mageia_projectmageia3cpe:2.3:o:mageia_project:mageia:3:*:*:*:*:*:*:*
mageia_projectmageia4cpe:2.3:o:mageia_project:mageia:4:*:*:*:*:*:*:*
gnuemacs*cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*
gnuemacs20.0cpe:2.3:a:gnu:emacs:20.0:*:*:*:*:*:*:*
gnuemacs20.1cpe:2.3:a:gnu:emacs:20.1:*:*:*:*:*:*:*
gnuemacs20.2cpe:2.3:a:gnu:emacs:20.2:*:*:*:*:*:*:*
gnuemacs20.3cpe:2.3:a:gnu:emacs:20.3:*:*:*:*:*:*:*
gnuemacs20.4cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*
gnuemacs20.5cpe:2.3:a:gnu:emacs:20.5:*:*:*:*:*:*:*
gnuemacs20.6cpe:2.3:a:gnu:emacs:20.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mageia_project	mageia	3	cpe:2.3:o:mageia_project:mageia:3:::::::*
mageia_project	mageia	4	cpe:2.3:o:mageia_project:mageia:4:::::::*
gnu	emacs	*	cpe:2.3:a:gnu:emacs::::::::
gnu	emacs	20.0	cpe:2.3:a:gnu:emacs:20.0:::::::*
gnu	emacs	20.1	cpe:2.3:a:gnu:emacs:20.1:::::::*
gnu	emacs	20.2	cpe:2.3:a:gnu:emacs:20.2:::::::*
gnu	emacs	20.3	cpe:2.3:a:gnu:emacs:20.3:::::::*
gnu	emacs	20.4	cpe:2.3:a:gnu:emacs:20.4:::::::*
gnu	emacs	20.5	cpe:2.3:a:gnu:emacs:20.5:::::::*
gnu	emacs	20.6	cpe:2.3:a:gnu:emacs:20.6:::::::*