Vulnerabilities > GNU > Emacs > 21.1

DATE CVE VULNERABILITY TITLE RISK
2012-01-19 CVE-2012-0035 Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
network
eric-m-ludlam gnu
critical
9.3
2008-04-22 CVE-2008-1694 Link Following vulnerability in GNU Emacs and Sccs
vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
local
low complexity
gnu CWE-59
4.6
2007-11-02 CVE-2007-5795 Local Variable Handling Code Execution vulnerability in GNU Emacs
The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.
local
debian gnu
6.3