CVE-2008-2142
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated...
CVE-2008-2142 is a medium vulnerability (CVSS 6.8) in Gnu Emacs, published May 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.66%, the 89th percentile. Fixed in xemacs21-packages 2009.02.17-1.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 3.66%EPSS, 89th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2009.02.17-1xemacs21-packages
Description
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xemacs21-packagesDebian:12 | before 2009.02.17-1 | 2009.02.17-1 |
What each source reports
NVD Score used
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
CVE-2008-2142- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
CVE-2008-2142- Updated
- 2026-11-02
EUVDEUVD-2008-2139No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
EUVD-2008-2139- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6hwc-q43w-j73jNo score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated...
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
GHSA-6hwc-q43w-j73j- Updated
- 2026-11-02
OSVNo score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
CVE-2008-2142- Updated
- 2026-11-02
OSVDEBIAN-CVE-2008-2142No score
Emacs 21 and XEmacs automatically load and execute .flc (fast lock) files that are associated with other files that are edited within Emacs, which allows user-assisted attackers to execute arbitrary code.
- Record
DEBIAN-CVE-2008-2142- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/archives/fedora-package-announce/2008-June/msg00782.html
issues.rpath.com/browse/RPL-2529
vupen.com/english/advisories/2008/1539/references
securityfocus.com/archive/1/492657/100/0/threaded
secunia.com/advisories/30827
securitytracker.com/id?1020019
Show 21 moreShow less
lists.opensuse.org/opensuse-security-announce/2008-06/msg00001.html
bugs.gentoo.org/show_bug.cgi?id=221197
security.gentoo.org/glsa/glsa-200902-06.xml
mandriva.com/security/advisories?name=MDVSA-2008:154
wiki.rpath.com/wiki/Advisories:rPSA-2008-0177
lists.gnu.org/archive/html/emacs-devel/2008-05/msg00645.html
thread.gmane.org/gmane.emacs.devel/96903
tracker.xemacs.org/XEmacs/its/issue378
exchange.xforce.ibmcloud.com/vulnerabilities/42362
nvd.nist.gov/vuln/detail/CVE-2008-2142
github.com/advisories/GHSA-6hwc-q43w-j73j
security-tracker.debian.org/tracker/CVE-2008-2142