CVE-2007-5795

The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky…

published November 2, 2007

CVSS
—
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00718 · 53.0th percentile
Published
2007-11-02T22:00Z
EPSS history
Timeline
  • 02 NOV 22:00Z
    The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky…
    cvelistv5