Home

CVE-2008-1694

Description

vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

Risk Information

Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.07

Associated Vulnerability

VulnerabilityOS Platform
Multiple Vulnerabilities are affected in GNU Emacs 21.3Windows
Multiple Vulnerabilities are affected in GNU Emacs 20.7Windows
Multiple Vulnerabilities are affected in GNU Emacs 21.1Windows
Multiple Vulnerabilities are affected in GNU Emacs 21.2Windows
Multiple Vulnerabilities are affected in GNU Emacs 21.4Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234