CVE-2007-5795
Publication date 2 November 2007
Last updated 24 July 2024
Ubuntu priority
The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| emacs21 | ||
| emacs22 | ||