CVE-2012-0035 in Emacs

Summary

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 12/07/2011
• Disclosure: 01/19/2012
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-426 (Confirmed)
• CVSS: 9.8
• EPSS: 0.04030
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2012-0035
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2012-0035
• CVE Details: https://www.cvedetails.com/cve/CVE-2012-0035/