CVE-2014-3421 in Emacs
Summary
lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
05/07/2014
Disclosure
05/08/2014
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 13301 | GNU Emacs gnus-fun.el link following | 59 | Not defined | Official fix | CVE-2014-3421 |