CVE-2017-14482 GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell....
HighCVSS 8.8
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GNU Emacs before 25.3 allows remote attackers to execute arbitrary code via email with crafted "Content-Type: text/enriched" data containing an x-display XML element that specifies execution of shell commands, related to an unsafe text/enriched extension in lisp/textmodes/enriched.el, and unsafe Gnus support for enriched and richtext inline MIME objects in lisp/gnus/mm-view.el. In particular, an Emacs user can be instantly compromised by reading a crafted email message (or Usenet news article).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| GNU emacs | <= 25.2 | No fix listed |
| debian linux | = 8.0 | No fix listed |
References
- DSA-3975 vendor-advisory
- www.openwall.com mailing-list patch third-party-advisory
- RHSA-2017:2771 vendor-advisory
- debbugs.gnu.org issue-tracking mailing-list patch vendor-advisory
- git.savannah.gnu.org issue-tracking patch third-party-advisory
- GLSA-201801-07 vendor-advisory
- DSA-3970 third-party-advisory vendor-advisory
- www.gnu.org release-notes vendor-advisory