CVE-2012-0035
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23...
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
CVE-2012-0035- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
CVE-2012-0035- Updated
- 2026-11-02
EUVDEUVD-2012-0075 No score
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
EUVD-2012-0075- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hw9p-49fv-hhp6 No score
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23...
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
GHSA-hw9p-49fv-hhp6- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10469-1 No score
emacs-25.1-1.1 on GA media
These are all security issues fixed in the emacs-25.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10469-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
emacsopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 25.1-1.1 | 25.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2012-0035 is a high vulnerability (CVSS 9.3) in Eric M Ludlam Cedet, published January 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. No source names a fixed version.
References
openwall.com/lists/oss-security/2012/01/10/2
sourceforge.net/mailarchive/message.php?msg_id=28657612
secunia.com/advisories/47311
Show 15 moreShow less
ubuntu.com/usn/USN-1586-1
mandriva.com/security/advisories?name=MDVSA-2013:076
lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html
security.gentoo.org/glsa/201812-05
lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
nvd.nist.gov/vuln/detail/CVE-2012-0035
github.com/advisories/GHSA-hw9p-49fv-hhp6
suse.com/security/cve/CVE-2012-0035