4.3

CVE-2012-1103

Exploit
emacs/notmuch-mua.el in Notmuch before 0.11.1, when using the Emacs interface, allows user-assisted remote attackers to read arbitrary files via crafted MML tags, which are not properly quoted in an email reply cna cause the files to be attached to the message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Notmuchmail ≫ Notmuch Version <= 0.11
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.1.1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.2
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.3
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.3.1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.4
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.5
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.6
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.6 Update254
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.6 Updaterc1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.6.1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.7
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.7 Updaterc1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.8
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.8 Updaterc0
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.8 Updaterc1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.9
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.9 Updaterc1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.9 Updaterc2
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.10
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.10 Updaterc1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.10 Updaterc2
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.10.1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.10.2
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.11 Updaterc1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.11 Updaterc2
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.11 Updaterc2-1
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.11 Updaterc3
   Gnu ≫ Emacs Version-
Notmuchmail ≫ Notmuch Version0.11 Updaterc3-1
   Gnu ≫ Emacs Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.67% 0.69
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.