Enriched mode implements an extension command to the text/enriched format called "x-display", which stores "display" text properties. It's possible to use this extension command to transparently execute arbitrary code in an Emacs process that opens a text/enriched file. Upstream issue: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=28350 Upstream patch: https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-25&id=9ad0fcc54442a9a01d41be19880250783426db70 References: http://seclists.org/oss-sec/2017/q3/422
Created emacs tracking bugs for this issue: Affects: fedora-all [bug 1490410]
This issue has been addressed in the following products: Red Hat Enterprise Linux 7 Via RHSA-2017:2771 https://access.redhat.com/errata/RHSA-2017:2771
Mitigation: This issue can be mitigated by adding the following lines to the Emacs init file (for example ~/.emacs, ~/emacs.d/init.el, site-start.el) and avoiding options that would bypass normal initialization, like 'emacs -Q': ;; Mitigate CVE-2017-14482 in Emacs 25.2 and earlier (require 'enriched) (defun enriched-decode-display-prop (start end &optional param) (list start end))