6.3

CVE-2007-5795

The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.

Data is provided by the National Vulnerability Database (NVD)
GnuEmacs Version <= 22.1
   DebianDebian Linux
GnuEmacs Version <= 22.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.01% 0.763
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.3 3.4 9.2
AV:L/AC:M/Au:N/C:N/I:C/A:C