CVE-2008-2142

Public Exploit

Description

Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.

6.8

CVSS

Severity: Medium

CVSS 2.0 •

EPSS 3.83% Top 15%

Vendor Advisory redhat.com Vendor Advisory opensuse.org Vendor Advisory gentoo.org Vendor Advisory mandriva.com Vendor Advisory mandriva.com Vendor Advisory redhat.com

Affected: n/a n/a

References

Link	Tags
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00782.html	vendor advisory
https://issues.rpath.com/browse/RPL-2529
http://www.vupen.com/english/advisories/2008/1539/references	vdb entry
http://www.securityfocus.com/archive/1/492657/100/0/threaded	mailing list
http://secunia.com/advisories/30827	third party advisory
http://www.securitytracker.com/id?1020019	vdb entry
http://lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html	vendor advisory
http://secunia.com/advisories/30199	third party advisory
https://bugs.gentoo.org/show_bug.cgi?id=221197
http://secunia.com/advisories/30303	third party advisory
http://security.gentoo.org/glsa/glsa-200902-06.xml	vendor advisory
http://secunia.com/advisories/30216	third party advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:154	vendor advisory
http://www.securityfocus.com/bid/29176	vdb entry
http://www.mandriva.com/security/advisories?name=MDVSA-2008:153	vendor advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0177
http://secunia.com/advisories/34004	third party advisory
http://lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html	mailing list
http://thread.gmane.org/gmane.emacs.devel/96903	exploit
https://www.redhat.com/archives/fedora-package-announce/2008-June/msg00736.html	vendor advisory
http://tracker.xemacs.org/XEmacs/its/issue378
http://www.vupen.com/english/advisories/2008/1540/references	vdb entry
http://secunia.com/advisories/30581	third party advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/42362	vdb entry

Frequently Asked Questions

What is the severity of CVE-2008-2142?: CVE-2008-2142 has been scored as a medium severity vulnerability.
How to fix CVE-2008-2142?: To fix CVE-2008-2142, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2008-2142 being actively exploited in the wild?: It is possible that CVE-2008-2142 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~4% probability that this vulnerability will be exploited by malicious actors in the next 30 days.