Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

emacs: arbitrary code execution

Package(s):

emacs

CVE #(s):

CVE-2008-3949

Created:

October 28, 2008

Updated:

February 24, 2009

Description:

From the CVE entry: Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute arbitrary code via a Trojan horse Python file.

Alerts:

Gentoo	200902-06	2009-02-23
Mandriva	MDVSA-2008:216	2008-10-27

(Log in to post comments)