CVE-2024-30204

In Emacs before 29.3, LaTeX preview is enabled by default for e-mail attachments.
References
Link Resource
http://www.openwall.com/lists/oss-security/2024/03/25/2
http://www.openwall.com/lists/oss-security/2024/04/08/3
http://www.openwall.com/lists/oss-security/2024/04/08/4
http://www.openwall.com/lists/oss-security/2024/04/08/6
http://www.openwall.com/lists/oss-security/2024/04/08/7
http://www.openwall.com/lists/oss-security/2024/04/10/3
http://www.openwall.com/lists/oss-security/2024/04/10/4
http://www.openwall.com/lists/oss-security/2024/04/10/5
http://www.openwall.com/lists/oss-security/2024/04/10/6
http://www.openwall.com/lists/oss-security/2024/04/11/4
https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c
https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html
https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html
http://www.openwall.com/lists/oss-security/2024/03/25/2
http://www.openwall.com/lists/oss-security/2024/04/08/3
http://www.openwall.com/lists/oss-security/2024/04/08/4
http://www.openwall.com/lists/oss-security/2024/04/08/6
http://www.openwall.com/lists/oss-security/2024/04/08/7
http://www.openwall.com/lists/oss-security/2024/04/10/3
http://www.openwall.com/lists/oss-security/2024/04/10/4
http://www.openwall.com/lists/oss-security/2024/04/10/5
http://www.openwall.com/lists/oss-security/2024/04/10/6
http://www.openwall.com/lists/oss-security/2024/04/11/4
https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c
https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29
https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html
https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html
Configurations

No configuration.

History

21 Nov 2024, 09:11

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2024/03/25/2 - () http://www.openwall.com/lists/oss-security/2024/03/25/2 -
References () http://www.openwall.com/lists/oss-security/2024/04/08/3 - () http://www.openwall.com/lists/oss-security/2024/04/08/3 -
References () http://www.openwall.com/lists/oss-security/2024/04/08/4 - () http://www.openwall.com/lists/oss-security/2024/04/08/4 -
References () http://www.openwall.com/lists/oss-security/2024/04/08/6 - () http://www.openwall.com/lists/oss-security/2024/04/08/6 -
References () http://www.openwall.com/lists/oss-security/2024/04/08/7 - () http://www.openwall.com/lists/oss-security/2024/04/08/7 -
References () http://www.openwall.com/lists/oss-security/2024/04/10/3 - () http://www.openwall.com/lists/oss-security/2024/04/10/3 -
References () http://www.openwall.com/lists/oss-security/2024/04/10/4 - () http://www.openwall.com/lists/oss-security/2024/04/10/4 -
References () http://www.openwall.com/lists/oss-security/2024/04/10/5 - () http://www.openwall.com/lists/oss-security/2024/04/10/5 -
References () http://www.openwall.com/lists/oss-security/2024/04/10/6 - () http://www.openwall.com/lists/oss-security/2024/04/10/6 -
References () http://www.openwall.com/lists/oss-security/2024/04/11/4 - () http://www.openwall.com/lists/oss-security/2024/04/11/4 -
References () https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c - () https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=6f9ea396f49cbe38c2173e0a72ba6af3e03b271c -
References () https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 - () https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29 -
References () https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html - () https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html -
References () https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html - () https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html -

04 Nov 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 2.8
CWE CWE-276

01 May 2024, 18:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/04/08/3 -
  • () http://www.openwall.com/lists/oss-security/2024/04/08/6 -
  • () http://www.openwall.com/lists/oss-security/2024/04/08/7 -
  • () http://www.openwall.com/lists/oss-security/2024/04/10/5 -
  • () http://www.openwall.com/lists/oss-security/2024/04/10/6 -

01 May 2024, 17:15

Type Values Removed Values Added
References
  • () http://www.openwall.com/lists/oss-security/2024/03/25/2 -
  • () http://www.openwall.com/lists/oss-security/2024/04/08/4 -
  • () http://www.openwall.com/lists/oss-security/2024/04/10/3 -
  • () http://www.openwall.com/lists/oss-security/2024/04/10/4 -
  • () http://www.openwall.com/lists/oss-security/2024/04/11/4 -

30 Apr 2024, 10:15

Type Values Removed Values Added
References
  • () https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html -

29 Apr 2024, 14:15

Type Values Removed Values Added
Summary
  • (es) En Emacs anterior a 29.3, la vista previa de LaTeX está habilitada de forma predeterminada para los archivos adjuntos de correo electrónico.
References
  • () https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html -

25 Mar 2024, 15:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-03-25 15:15

Updated : 2024-11-21 09:11


NVD link : CVE-2024-30204

Mitre link : CVE-2024-30204

CVE.ORG link : CVE-2024-30204


JSON object : View

Products Affected

No product.

CWE
CWE-276

Incorrect Default Permissions