CVE-2012-0035
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23...
CVE-2012-0035 is a high vulnerability (CVSS 9.3) in Eric M Ludlam Cedet, published January 19, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.30%, the 83rd percentile. No source names a fixed version.
- Severity
- 9.3 HighCVSS 2.0, NVD
- Exploit chance
- 2.30%EPSS, 83rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
emacsopenSUSE:Tumbleweed From an advisory covering 6 CVEs | before 25.1-1.1 | 25.1-1.1 |
What each source reports
NVD Score used
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
CVE-2012-0035- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
CVE-2012-0035- Updated
- 2026-11-02
EUVDEUVD-2012-0075No score
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
EUVD-2012-0075- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hw9p-49fv-hhp6No score
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23...
Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.
- Record
GHSA-hw9p-49fv-hhp6- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10469-1No score
emacs-25.1-1.1 on GA media
These are all security issues fixed in the emacs-25.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10469-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
openwall.com/lists/oss-security/2012/01/10/2
sourceforge.net/mailarchive/message.php?msg_id=28657612
secunia.com/advisories/47311
Show 15 moreShow less
ubuntu.com/usn/USN-1586-1
mandriva.com/security/advisories?name=MDVSA-2013:076
lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html
security.gentoo.org/glsa/201812-05
lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.html
nvd.nist.gov/vuln/detail/CVE-2012-0035
github.com/advisories/GHSA-hw9p-49fv-hhp6
suse.com/security/cve/CVE-2012-0035