CVE-2007-6109
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service ...
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
Exploit likelihood
What each source reports
NVD Score used
10.0
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
CVE-2007-6109- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
CVE-2007-6109- Updated
- 2026-11-02
EUVDEUVD-2007-6078 No score
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
EUVD-2007-6078- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2gmr-48xr-j34m No score
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service ...
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
GHSA-2gmr-48xr-j34m- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVAZL-34672 No score
CVE-2007-6109 affecting package emacs for versions less than 29.1-1
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
AZL-34672- Updated
- 2026-11-05
OSV No score
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
CVE-2007-6109- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-6109 No score
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
- Record
DEBIAN-CVE-2007-6109- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6109 is a high vulnerability (CVSS 10.0) in Gnu Emacs, published December 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.04%, the 87th percentile. Fixed in emacs 29.1-1.
References
secunia.com/advisories/27965
usn.ubuntu.com/607-1
secunia.com/advisories/27984
bugs.gentoo.org/show_bug.cgi?id=200297
vupen.com/english/advisories/2008/0924/references
novell.com/linux/security/advisories/2007_25_sr.html
Show 12 moreShow less
secunia.com/advisories/29420
lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
exchange.xforce.ibmcloud.com/vulnerabilities/38904
mandriva.com/security/advisories?name=MDVSA-2008:034
secunia.com/advisories/30109
security.gentoo.org/glsa/glsa-200712-03.xml
docs.info.apple.com/article.html?artnum=307562
secunia.com/advisories/28838
lists.opensuse.org/opensuse-security-announce/2008-02/msg00003.html
nvd.nist.gov/vuln/detail/CVE-2007-6109
github.com/advisories/GHSA-2gmr-48xr-j34m
security-tracker.debian.org/tracker/CVE-2007-6109