CVE-2008-2142
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated...
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
Exploit likelihood
What each source reports
NVD Score used
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
CVE-2008-2142- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
CVE-2008-2142- Updated
- 2026-11-02
EUVDEUVD-2008-2139 No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
EUVD-2008-2139- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hwc-q43w-j73j No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated...
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
GHSA-6hwc-q43w-j73j- Updated
- 2026-11-02
OSV No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
CVE-2008-2142- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-2142 No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
DEBIAN-CVE-2008-2142- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xemacs21-packagesDebian:12 |
before 2009.02.17-1 | 2009.02.17-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2142 is a medium vulnerability (CVSS 6.8) in Gnu Emacs, published May 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.66%, the 89th percentile. Fixed in xemacs21-packages 2009.02.17-1.
References
redhat.com/archives/fedora-package-announce/2008-June/msg00782.html
issues.rpath.com/browse/RPL-2529
vupen.com/english/advisories/2008/1539/references
securityfocus.com/archive/1/492657/100/0/threaded
secunia.com/advisories/30827
securitytracker.com/id?1020019
Show 21 moreShow less
lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
bugs.gentoo.org/show_bug.cgi?id=221197
security.gentoo.org/glsa/glsa-200902-06.xml
mandriva.com/security/advisories?name=MDVSA-2008:154
wiki.rpath.com/wiki/Advisories:rPSA-2008-0177
lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html
thread.gmane.org/gmane.emacs.devel/96903
tracker.xemacs.org/XEmacs/its/issue378
exchange.xforce.ibmcloud.com/vulnerabilities/42362
nvd.nist.gov/vuln/detail/CVE-2008-2142
github.com/advisories/GHSA-6hwc-q43w-j73j
security-tracker.debian.org/tracker/CVE-2008-2142