CVE-2008-3949 describes a critical vulnerability in Emacs versions 22.1 and 22.2, specifically within the python.el component, which allows for arbitrary code execution. This flaw occurs because Emacs imports Python scripts from the current working directory when editing a Python file, enabling a local attacker to execute malicious code via a Trojan horse Python file. With a CVSS score of 7.2 (High), the vulnerability has a low attack complexity and no authentication required, leading to complete compromise of confidentiality, integrity, and availability. There is currently no public exploit intelligence, such as Metasploit modules or ExploitDB entries, and the vulnerability has received minimal community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
All Versions ImpactedCPE matchmatch criteria | cpe:2.3:o:suse:suse_linux:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:C/I:C/A:C
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.