GNU Emacs CVE-2017-14482 Remote Code Execution Vulnerability

Bugtraq ID:	100873
Class:	Input Validation Error
CVE:	CVE-2017-14482
Remote:	Yes
Local:	No
Published:	Sep 04 2017 12:00AM
Updated:	Sep 04 2017 12:00AM
Credit:	Charles A. Roelli
Vulnerable:	Redhat Enterprise Linux 7 Redhat Enterprise Linux 6 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Linux 2.0 GNU Emacs 21.3.1 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 GNU Emacs 21.3 + Ubuntu Ubuntu Linux 4.1 ppc + Ubuntu Ubuntu Linux 4.1 ia64 + Ubuntu Ubuntu Linux 4.1 ia32 GNU Emacs 21.2 GNU Emacs 20.6 GNU Emacs 20.5 GNU Emacs 20.4 GNU Emacs 20.3 GNU Emacs 20.2 GNU Emacs 20.1 GNU Emacs 20.0 + Debian Linux 3.0 sparc + Debian Linux 3.0 s/390 + Debian Linux 3.0 ppc + Debian Linux 3.0 mipsel + Debian Linux 3.0 mips + Debian Linux 3.0 m68k + Debian Linux 3.0 ia-64 + Debian Linux 3.0 ia-32 + Debian Linux 3.0 hppa + Debian Linux 3.0 arm + Debian Linux 3.0 alpha GNU Emacs 25.2 GNU Emacs 25.1 GNU Emacs 24.3 GNU Emacs 24.2 GNU Emacs 24.1 GNU Emacs 23.4 GNU Emacs 23.3 GNU Emacs 23.2 GNU Emacs 23.1 GNU Emacs 22.3 GNU Emacs 22.2 GNU Emacs 22.1 GNU Emacs 21.4 GNU Emacs 21.2 GNU Emacs 21.1 GNU Emacs 20.7 GNU Emacs 19.29
Not Vulnerable:	GNU Emacs 25.3

GNU Emacs CVE-2017-14482 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GNU Emacs CVE-2017-14482 Remote Code Execution Vulnerability

References:

• Bug 1490409 - (CVE-2017-14482) CVE-2017-14482 emacs: Unsafe enriched mode transl (Red Hat)
  
• Emacs Product Page (GNU)
  
• GNU bug report logs - #28350 CVE-2017-14482: enriched.el code execution (Gnu.org)
  
• Remove unsafe enriched mode translations (Gnu.org)
  
• CVE-2017-14482 (Red Hat)