Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use several vulnerabilities of Emacs.

Impacted products: Unix (platform)

Severity: 1/4

Creation date: 07/05/2014

DESCRIPTION OF THE VULNERABILITY

Several vulnerabilities were announced in Emacs.

A local attacker can create a symbolic link named /tmp/esrc, in
order to alter the pointed file, with privileges of the
application. [severity:1/4]

A local attacker can create a symbolic link named
/tmp/gnus.face.ppm, in order to alter the pointed file, with
privileges of the application. [severity:1/4]

A local attacker can create a symbolic link named
/tmp/Mosaic.$PID, in order to alter the pointed file, with
privileges of the application. [severity:1/4]

A local attacker can create a symbolic link named /tmp/tramp.$PID,
in order to alter the pointed file, with privileges of the
application. [severity:1/4]

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Emacs-multiple-vulnerabilities-14707