Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
GNU Emacs Local变量处理代码执行漏洞
Vulnerability Description
Emacs是一个可扩展的实时显示编辑器。 Emacs的实现上存在漏洞，攻击者可能利用此漏洞在用户系统上执行恶意代码。 如果将enable-local-variables设置为:safe的话，则Emacs中的hack-local-variables函数可能无法正确地搜索不安全变量的列表，当用户打开了包含有Local变量声明的特制文件时，攻击者就可以绕过限制修改关键程序变量，导致执行任意Emacs Lisp代码。
CVSS Information
N/A
Vulnerability Type
N/A