CVE-2012-0035
Published Jan 19, 2012
Last updated 6 years ago
Overview
- Description
- Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Source
- secalert@redhat.com
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Evaluator
- Comment
- Per: http://cwe.mitre.org/data/definitions/426.html 'CWE-426: Untrusted Search Path'
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81840C8F-0D7C-46B0-8BF2-328DF34AD6B5",
"versionEndIncluding": "1.0"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A64840D-EDD2-4776-8F76-108A85604524"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AD9BFD76-DBD0-4FA7-AC95-9ED86F041840"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C249F7CC-3524-4CA2-B838-F659B825BB1D"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:pre1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "97721CF9-7FE5-4A35-9982-7A358D707149"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:pre2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "98E05598-6322-4EAA-9BFF-B8A7DE63E959"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:pre3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D62A1EF8-7EF8-4AEA-91A9-F47FD72D52DD"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:pre4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "814A737D-C0C5-405E-AFF6-EB554AE4151A"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:pre6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40CF2404-803C-478C-9111-FFA9173C89B7"
},
{
"criteria": "cpe:2.3:a:eric_m_ludlam:cedet:1.0:pre7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A30EB0E8-2CB4-4EC5-A280-3CF3BDBEC969"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D2680B3-7AE8-47E3-9027-9CFB19292AC4",
"versionEndIncluding": "23.3"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E460F3A1-71DD-4A37-9F17-6B4E5C9A46AE"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0F9D5B3C-7534-4DC6-BE44-91A0031FBA6C"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4EB2E29F-371A-43AB-8CBF-DDFABDB103BB"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05F6124D-F3C1-4E4C-B580-85AB01833885"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9571E866-AB82-4B95-8097-ED0DA038331F"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A773690-9650-40E1-BCE3-7E020AF61BCD"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "26D9A554-CB40-461D-9C95-78051B0CA354"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:20.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AFE5D6E-1979-4CF2-ACE0-BB6F31F80434"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7731A395-328A-4435-A388-1419224A4256"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05BDDB87-0AFF-4BDC-995A-94F221ED3641"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9ADBEE6-3B38-4284-B9F8-37F7FFEBDE81"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4389884-70D2-4915-80A7-CFA4A420A024"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA95B19B-F35D-4644-9E75-5A138A960C10"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE5CB6EB-74D8-4CA8-8B86-08E06859E2E4"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:21.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC7E9FE5-E87C-440B-A16E-327501BC8977"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:22.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9ADF55EE-0F79-414A-B701-14DDA1C9C3B5"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:22.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37E5A757-C2C8-49D4-AFCD-156CCF4B7262"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:22.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1D047EC-2354-430D-B44C-FE8574F7617B"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:23.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99B66AEA-D831-4A17-A7D6-4DEDA28985C2"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:23.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "944A2F7B-375B-4466-8A98-934123C209FD"
},
{
"criteria": "cpe:2.3:a:gnu:emacs:23.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9948287-D8A4-4B29-9240-FCD25E73B00D"
}
],
"operator": "OR"
}
]
}
]