CVE-2024-30203
MEDIUMEmacs < 29.3 - Unauthenticated Arbitrary Code Execution via Inline MIME Content Handling
Title source: llmDescription
In Emacs before 29.3, Gnus treats inline MIME contents as trusted.
References (16)
Core 16
Core References
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/03/25/2
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/4
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/3
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/11/5
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/11/6
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/11/4
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/4
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/6
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/5
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/7
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/3
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/6
Scores
CVSS v3
5.5
EPSS
0.0003
EPSS Percentile
8.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
Status
published
Products (3)
debian/debian_linux
10.0
gnu/emacs
< 29.3
gnu/org_mode
< 9.6.23
Published
Mar 25, 2024
Tracked Since
Feb 18, 2026