Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

GNU Emacs Local Variable Handling Code Execution Vulnerability

Emacs is prone to a vulnerability that lets attackers execute arbitrary code.

Due to a design error, the application ignores certain security settings and modifies local variables.

By supplying a malicious file, an attacker can exploit this issue to carry out various attacks, including executing arbitrary code in the context of the application. This may facilitate remote unauthorized access.

This issue affects Emacs 22.1; other versions may be vulnerable as well.







 

Privacy Statement
Copyright 2009, SecurityFocus