CVE-2014-3421

N/A Unknown

Published: May 08, 2014 Modified: May 06, 2026

Description

lisp/gnus/gnus-fun.el in GNU Emacs 24.3 and earlier allows local users to overwrite arbitrary files via a symlink attack on the /tmp/gnus.face.ppm temporary file.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://advisories.mageia.org/MGASA-2014-0250.html

Source: cve@mitre.org

http://debbugs.gnu.org/cgi/bugreport.cgi?bug=17428#8

Source: cve@mitre.org

http://lists.gnu.org/archive/html/emacs-diffs/2014-05/msg00055.html

Source: cve@mitre.org

http://openwall.com/lists/oss-security/2014/05/07/7

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2015:117

Source: cve@mitre.org

http://advisories.mageia.org/MGASA-2014-0250.html