Red Hat Bugzilla – Bug 146704
CAN-2005-0100 Arbitrary code execution in *emacs*
Last modified: 2015-01-07 19:09:20 EST
Max Vozeler discovered several format string vulnerabilities in the
movemail utility of Emacs, the well-known editor. Via connecting to a
malicious POP server an attacker can execute arbitrary code under the
privileges of group mail (or worse, depending on the permissions of
the movemail binary).
Created attachment 110461 [details]
Proposed patch for this issue.
This issue should also affects RHEL2.1.
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.