Summary
Charles A. Roelli discovered that Emacs incorrectly handled certain
files. If a user were tricked into opening a specially crafted file (e.g., email
messages in gnus), an attacker could possibly use this to execute arbitrary code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | emacs24 | 24.3+1-2ubuntu1.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | emacs24 | 24.5+1-6ubuntu1.1 |
Vulnerabilities 1
-
Unscored —
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enri…
References
-
report
https://ubuntu.com/security/CVE-2017-14482