https://nvd.nist.gov/vuln/detail/CVE-2012-3479 emacsがずいぶん前に禁止したやつだ。CVE番号あったんだな。
Post summary
The post only references CVE-2012-3479 via its NVD link and offers no further details about the vulnerability, exploitation, or mitigation.
Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
lisp/files.el in Emacs 23.2, 23.3, 23.4, and 24.1 automatically executes eval forms in local-variable sections when the enable-local-variables option is set to :safe, which allows user-assisted remote attackers to execute arbitrary Emacs Lisp code via a crafted file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
4 versions affected across 1 product
https://nvd.nist.gov/vuln/detail/CVE-2012-3479 emacsがずいぶん前に禁止したやつだ。CVE番号あったんだな。
Post summary
The post only references CVE-2012-3479 via its NVD link and offers no further details about the vulnerability, exploitation, or mitigation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gnu | emacs | 23.2 | - | - |
| App | gnu | emacs | 23.3 | - | - |
| App | gnu | emacs | 23.4 | - | - |
| App | gnu | emacs | 24.1 | - | - |