CVE-2024-30204
LOWEmacs < 29.3 - Incorrect Default Permissions for LaTeX Preview in Email Attachments
Title source: llmDescription
In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
References (14)
Core 14
Core References
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/03/25/2
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/4
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/3
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/11/4
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/4
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/6
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/5
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/7
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/08/3
Mailing List mailing-list
http://www.openwall.com/lists/oss-security/2024/04/10/6
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html
Scores
CVSS v3
2.8
EPSS
0.0002
EPSS Percentile
4.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-276
Status
published
Products (3)
debian/debian_linux
10.0
gnu/emacs
< 29.3
gnu/org_mode
< 9.6.23
Published
Mar 25, 2024
Tracked Since
Feb 18, 2026