Ubuntu: Emacs vulnerabilities


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) Ubuntu: Emacs vulnerabilities
# 1  
Old 05-06-2008
Ubuntu: Emacs vulnerabilities

LinuxSecurity.com: It was discovered that Emacs did not account for precision when formatting integers. If a user were tricked into opening a specially crafted file, an attacker could cause a denial of service or possibly other unspecified actions. This issue does not affect Ubuntu 8.04. (CVE-2007-6109) Steve Grubb discovered that the vcdiff script as included in Emacs created temporary files in an insecure way when used with SCCS. Local users could exploit a race condition to create or overwrite files with the privileges of the user invoking the program. (CVE-2008-1694)

More...
Login or Register to Ask a Question

Previous Thread | Next Thread

2 More Discussions You Might Find Interesting

1. Ubuntu

Emacs printing with Ubuntu 14.04 LTS

I am trying to setup a development environment that mirrors my Windows and SCO Unix systems. I use emacs and I am having trouble printing. I keep getting the error message; Symbol's function definition is void: default-printer-name I have googled this and for possible answers for... (0 Replies)
Discussion started by: trolley
0 Replies

2. UNIX for Dummies Questions & Answers

Ubuntu, emacs, vista help

Folks, I need some help! Please understand that I have searched and read tons of how-to's and other documents in researching this and getting Putty, Cygwin, and emacs running on the Vista machine. I have a Ubuntu headless server i am trying to configure as my gateway system for the house... (3 Replies)
Discussion started by: poundjd
3 Replies
Login or Register to Ask a Question
ZILE(1) 							   User Commands							   ZILE(1)

NAME
Zile - Zile Is Lossy Emacs SYNOPSIS
zile [OPTION-OR-FILENAME]... DESCRIPTION
Zile is a lightweight Emacs clone that provides a subset of Emacs's functionality suitable for basic editing. Run Zile, the lightweight Emacs clone. Initialization options: --no-init-file, -q do not load ~/.zile --funcall, -f FUNC call Zile Lisp function FUNC with no arguments --load, -l FILE load Zile Lisp FILE using the load function --help display this help message and exit --version display version information and exit Action options: FILE visit FILE using find-file +LINE FILE visit FILE using find-file, then go to line LINE Exit status is 0 if OK, 1 if it cannot start up, for example because of an invalid command-line argument, and 2 if it crashes or runs out of memory. FILES
~/.zile -- user's Zile init file /usr/share/zile/dotzile-extra.el -- which contains some useful code for the init file. AUTHOR
Zile was written by Sandro Sigala, David A. Capello and Reuben Thomas. The Lisp interpreter is based on code by Scott Lawrence. REPORTING BUGS
Report bugs to bug-zile@gnu.org. COPYRIGHT
Copyright (C) 2010 Free Software Foundation, Inc. GNU Zile comes with ABSOLUTELY NO WARRANTY. You may redistribute copies of Zile under the terms of the GNU General Public License. For more information about these matters, see the file named COPYING. SEE ALSO
emacs(1) Zile 2.3.20 November 2010 ZILE(1)