Every CVE Search/ Get API key

CVE-2007-6109

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service ...

10.0 HighFix available

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Exploit likelihood

3.04%Up 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
CVE-2007-6109
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
CVE-2007-6109
Updated
2026-11-02
EUVDEUVD-2007-6078 No score

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
EUVD-2007-6078
Updated
2026-11-03
GitHub AdvisoriesGHSA-2gmr-48xr-j34m No score

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service ...

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
GHSA-2gmr-48xr-j34m
Weakness
CWE-119
Updated
2026-11-02
OSVAZL-34672 No score

CVE-2007-6109 affecting package emacs for versions less than 29.1-1

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
AZL-34672
Updated
2026-11-05
OSV No score

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
CVE-2007-6109
Updated
2026-11-02
OSVDEBIAN-CVE-2007-6109 No score

Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.

Record
DEBIAN-CVE-2007-6109
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
emacs
Azure Linux:3
before 29.1-1
29.1-1
xemacs21
Debian:12
before 21.4.21-4
21.4.21-4
emacs21
Debian:5.0
before 21.4a+1-5.1+lenny1
21.4a+1-5.1+lenny1
emacs22
Debian:5.0
before 22.1+1-2.1+lenny1
22.1+1-2.1+lenny1

History

History
RecordedChangedSources
factsOSV
aliasesEUVD
affected, aliases, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-6109 is a high vulnerability (CVSS 10.0) in Gnu Emacs, published December 7, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.04%, the 87th percentile. Fixed in emacs 29.1-1.

References

Show 12 moreShow less
MoveEnter Open