Unscored CVE-2008-3949 EUVD-2008-3934GHSA-9pv8-whmh-9q87

emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python f…

Published Sep 22, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

emacs/lisp/progmodes/python.el in Emacs 22.1 and 22.2 imports Python script from the current working directory during editing of a Python file, which allows local users to execute arbitrary code via a Trojan horse Python file.

References

[emacs-devel] 20080905 Vulnerability in Emacs python integration mailing-list
31982 third-party-advisory
emacs-python-code-execution(45021) vdb-entry
31052 vdb-entry
https://bugzilla.novell.com/show_bug.cgi?id=424340
SUSE-SR:2008:018 vendor-advisory
GLSA-200902-06 vendor-advisory
MDVSA-2008:216 vendor-advisory
34004 third-party-advisory