CVE-2008-4191
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a...
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
Exploit likelihood
What each source reports
NVD Score used
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
- Record
CVE-2008-4191- CVSS 2.0
- 6.6 Medium
AV:L/AC:L/Au:N/C:N/I:C/A:C - Weakness
- CWE-59
- Updated
- 2026-11-02
CVE List No score
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
- Record
CVE-2008-4191- Updated
- 2026-11-02
EUVDEUVD-2008-4174 No score
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
- Record
EUVD-2008-4174- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3qp2-xpxj-256j No score
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a...
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
- Record
GHSA-3qp2-xpxj-256j- Weakness
- CWE-59
- Updated
- 2026-11-02
OSV No score
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
- Record
CVE-2008-4191- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-4191 No score
extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.
- Record
DEBIAN-CVE-2008-4191- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4191 is a medium vulnerability (CVSS 6.6) in Emacspeak Inc Emacspeak, published September 24, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.41%, the 35th percentile. Fixed in emacspeak 28.0-2.
References
redhat.com/archives/fedora-package-announce/2008-October/msg00010.html
bugzilla.redhat.com/show_bug.cgi?id=460435
bugs.debian.org/cgi-bin/bugreport.cgi?bug=496431
openwall.com/lists/oss-security/2008/10/30/2
secunia.com/advisories/32071
bugs.gentoo.org/show_bug.cgi?id=235770
Show 8 moreShow less
securityfocus.com/bid/31241
exchange.xforce.ibmcloud.com/vulnerabilities/45237
dev.gentoo.org/~rbu/security/debiantemp/emacspeak
nvd.nist.gov/vuln/detail/CVE-2008-4191
github.com/advisories/GHSA-3qp2-xpxj-256j
security-tracker.debian.org/tracker/CVE-2008-4191