GNU Emacs EDE component Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
GNU emacss 23.3
GNU emacss 23.2
Unaffected system:
GNU emacss 23.4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51354
Cve id: CVE-2012-0035

Emacs is an extensible Real-Time Display Editor.

GNU Emacs has a remote code execution vulnerability. After successful exploitation, attackers can execute arbitrary code with the current user permission.

<* Source: Hiroshi Oota

Link: http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

GNU
---
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.gnu.org