Total vulnerabilities in the database
Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable.
Software | From | Fixed in |
---|---|---|
gnu / emacs | 21.2.1 | 21.2.1.x |