lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier... · CVE-2014-3422 · GitHub Advisory Database · GitHub

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier...

Low severity Unreviewed Published May 17, 2022 to the GitHub Advisory Database • Updated Jan 28, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

lisp/emacs-lisp/find-gc.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on a temporary file under /tmp/esrc/.

References

Published by the National Vulnerability Database

May 8, 2014

Published to the GitHub Advisory Database May 17, 2022

Last updated Jan 28, 2023