7.5

CVE-2005-0100

Format string vulnerability in the movemail utility in (1) Emacs 20.x, 21.3, and possibly other versions, and (2) XEmacs 21.4 and earlier, allows remote malicious POP3 servers to execute arbitrary code via crafted packets.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gnu ≫ Emacs Version <= 20.0
Gnu ≫ Emacs Version21.3
Gnu ≫ Xemacs Version <= 21.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.36% 0.9
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marc.info/?l=bugtraq&m=110780416112719&w=2
http://www.debian.org/security/2005/dsa-670
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-671
Patch
Vendor Advisory
http://www.debian.org/security/2005/dsa-685
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2005:038
http://www.redhat.com/support/errata/RHSA-2005-110.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-112.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-133.html
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/433928/30/5010/threaded
http://www.securityfocus.com/bid/12462
https://exchange.xforce.ibmcloud.com/vulnerabilities/19246
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9408