CVE-2008-2142

Emacs 21 and XEmacs - Remote Code Execution via Automatic .flc File Loading

Title source: llm
STIX 2.1

Description

Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.

References (24)

Core 24
Core References
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00782.html
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-2529
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1539/references
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/492657/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30827
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1020019
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30199
Issue Tracking x_refsource_confirm
https://bugs.gentoo.org/show_bug.cgi?id=221197
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30303
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200902-06.xml
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30216
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:154
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29176
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2008:153
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0177
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/34004
Various Sources mailing-list x_refsource_mlist
http://lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html
Vendor Advisory vendor-advisory x_refsource_fedora
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00736.html
Various Sources x_refsource_misc
http://tracker.xemacs.org/XEmacs/its/issue378
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1540/references
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30581
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/42362

Scores

EPSS 0.0299
EPSS Percentile 86.7%

Details

Status published
Products (2)
gnu/emacs 21.3.1
gnu/xemacs
Published May 12, 2008
Tracked Since Feb 18, 2026