KLA10169 WLF vulnerability in Emacs

2014-05-0800:00:00

Kaspersky Lab

threats.kaspersky.com

CVSS2

3.3

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.2

Confidence

Low

EPSS

Percentile

5.1%

JSON

An unspecified vulnerability was found in GNU Emacs. By exploiting this vulnerability malicious users can overwrite arbitrary tmp files. This vulnerability can be exploited locally via a symlink attack.

Original advisories

Related products

GNU-Emacs

CVE list

CVE-2014-3424 warning

CVE-2014-3423 warning

CVE-2014-3422 warning

CVE-2014-3421 warning

Solution

Update to latest version

Impacts

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.