← Database

CVE-2003-1232

MEDIUM CVSS: 5.1 Published: 2003-12-31 Modified: 2026-06-16

Description

Emacs 21.2.1 does not prompt or warn the user before executing Lisp code in the local variables section of a text file, which allows user-assisted attackers to execute arbitrary commands, as demonstrated using the mode-name variable.

Affected Platforms

Gnu Emacs

Weakness Type

NVD-CWE-Other

References