GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2007-5795 (GCVE-0-2007-5795)

Vulnerability from cvelistv5 – Published: 2007-11-02 22:00 – Updated: 2024-08-07 15:46
VLAI
Summary
The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
https://www.redhat.com/archives/fedora-package-an… vendor-advisoryx_refsource_FEDORA
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008 x_refsource_CONFIRM
http://secunia.com/advisories/27984 third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
http://secunia.com/advisories/27728 third-party-advisoryx_refsource_SECUNIA
http://www.vupen.com/english/advisories/2008/0924… vdb-entryx_refsource_VUPEN
http://www.vupen.com/english/advisories/2007/3715 vdb-entryx_refsource_VUPEN
http://cvs.savannah.gnu.org/viewvc/emacs/emacs/li… x_refsource_CONFIRM
http://osvdb.org/42060 vdb-entryx_refsource_OSVDB
http://www.ubuntu.com/usn/usn-541-1 vendor-advisoryx_refsource_UBUNTU
http://secunia.com/advisories/29420 third-party-advisoryx_refsource_SECUNIA
http://lists.apple.com/archives/security-announce… vendor-advisoryx_refsource_APPLE
http://www.mandriva.com/security/advisories?name=… vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/bid/26327 vdb-entryx_refsource_BID
http://bugs.gentoo.org/show_bug.cgi?id=197958 x_refsource_CONFIRM
http://security.gentoo.org/glsa/glsa-200712-03.xml vendor-advisoryx_refsource_GENTOO
http://docs.info.apple.com/article.html?artnum=307562 x_refsource_CONFIRM
http://secunia.com/advisories/27508 third-party-advisoryx_refsource_SECUNIA
http://secunia.com/advisories/27627 third-party-advisoryx_refsource_SECUNIA
Date Public
2007-11-02 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T15:46:59.515Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "FEDORA-2007-3056",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
          },
          {
            "name": "27984",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27984"
          },
          {
            "name": "emacs-hacklocalvariables-security-bypass(38263)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
          },
          {
            "name": "27728",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27728"
          },
          {
            "name": "ADV-2008-0924",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/0924/references"
          },
          {
            "name": "ADV-2007-3715",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/3715"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
          },
          {
            "name": "42060",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/42060"
          },
          {
            "name": "USN-541-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/usn-541-1"
          },
          {
            "name": "29420",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/29420"
          },
          {
            "name": "APPLE-SA-2008-03-18",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
          },
          {
            "name": "MDVSA-2008:034",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
          },
          {
            "name": "26327",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/26327"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
          },
          {
            "name": "GLSA-200712-03",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://docs.info.apple.com/article.html?artnum=307562"
          },
          {
            "name": "27508",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27508"
          },
          {
            "name": "27627",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/27627"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-11-02T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-28T12:57:01.000Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "FEDORA-2007-3056",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
        },
        {
          "name": "27984",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27984"
        },
        {
          "name": "emacs-hacklocalvariables-security-bypass(38263)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
        },
        {
          "name": "27728",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27728"
        },
        {
          "name": "ADV-2008-0924",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/0924/references"
        },
        {
          "name": "ADV-2007-3715",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/3715"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
        },
        {
          "name": "42060",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/42060"
        },
        {
          "name": "USN-541-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/usn-541-1"
        },
        {
          "name": "29420",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/29420"
        },
        {
          "name": "APPLE-SA-2008-03-18",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
        },
        {
          "name": "MDVSA-2008:034",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
        },
        {
          "name": "26327",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/26327"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
        },
        {
          "name": "GLSA-200712-03",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://docs.info.apple.com/article.html?artnum=307562"
        },
        {
          "name": "27508",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27508"
        },
        {
          "name": "27627",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/27627"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2007-5795",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "FEDORA-2007-3056",
              "refsource": "FEDORA",
              "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
            },
            {
              "name": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008",
              "refsource": "CONFIRM",
              "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
            },
            {
              "name": "27984",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27984"
            },
            {
              "name": "emacs-hacklocalvariables-security-bypass(38263)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
            },
            {
              "name": "27728",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27728"
            },
            {
              "name": "ADV-2008-0924",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/0924/references"
            },
            {
              "name": "ADV-2007-3715",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/3715"
            },
            {
              "name": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29",
              "refsource": "CONFIRM",
              "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
            },
            {
              "name": "42060",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/42060"
            },
            {
              "name": "USN-541-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/usn-541-1"
            },
            {
              "name": "29420",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/29420"
            },
            {
              "name": "APPLE-SA-2008-03-18",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
            },
            {
              "name": "MDVSA-2008:034",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
            },
            {
              "name": "26327",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/26327"
            },
            {
              "name": "http://bugs.gentoo.org/show_bug.cgi?id=197958",
              "refsource": "CONFIRM",
              "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
            },
            {
              "name": "GLSA-200712-03",
              "refsource": "GENTOO",
              "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
            },
            {
              "name": "http://docs.info.apple.com/article.html?artnum=307562",
              "refsource": "CONFIRM",
              "url": "http://docs.info.apple.com/article.html?artnum=307562"
            },
            {
              "name": "27508",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27508"
            },
            {
              "name": "27627",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/27627"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2007-5795",
    "datePublished": "2007-11-02T22:00:00.000Z",
    "dateReserved": "2007-11-02T00:00:00.000Z",
    "dateUpdated": "2024-08-07T15:46:59.515Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2007-5795",
      "date": "2026-09-19",
      "epss": "0.00718",
      "percentile": "0.52371"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "4C8919F1-CD33-437E-9627-69352B276BA3",
                  "vulnerable": false
                }
              ],
              "negate": false,
              "operator": "OR"
            },
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "F4FB1FAE-4C0F-4F1E-B2D8-C56B5603937D",
                  "versionEndIncluding": "22.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "AND"
        },
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "F4FB1FAE-4C0F-4F1E-B2D8-C56B5603937D",
                  "versionEndIncluding": "22.1",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration."
        },
        {
          "lang": "es",
          "value": "La funci\u00f3n hack-local-variables en el Emacs anterior al 22.2, cuando el enable-local-variables est\u00e1 establecido a :safe, no busca correctamente las listas de las variables no seguras o de riesgo, lo que permite a permite a atacantes con la intervenci\u00f3n del usuario evitar las restricciones y modificar variables de programa cr\u00edticas a trav\u00e9s de un fichero que contiene declaraciones de variables Locales."
        }
      ],
      "id": "CVE-2007-5795",
      "lastModified": "2024-11-21T00:38:42.723",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "MEDIUM",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "LOCAL",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 6.3,
              "confidentialityImpact": "NONE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:L/AC:M/Au:N/C:N/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 3.4,
            "impactScore": 9.2,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2007-11-02T22:46:00.000",
      "references": [
        {
          "source": "secalert@redhat.com",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://docs.info.apple.com/article.html?artnum=307562"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://osvdb.org/42060"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27508"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27627"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27728"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/27984"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://secunia.com/advisories/29420"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.securityfocus.com/bid/26327"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.ubuntu.com/usn/usn-541-1"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vupen.com/english/advisories/2007/3715"
        },
        {
          "source": "secalert@redhat.com",
          "url": "http://www.vupen.com/english/advisories/2008/0924/references"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
        },
        {
          "source": "secalert@redhat.com",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://docs.info.apple.com/article.html?artnum=307562"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://osvdb.org/42060"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27508"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27627"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27728"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/27984"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://secunia.com/advisories/29420"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.securityfocus.com/bid/26327"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.ubuntu.com/usn/usn-541-1"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2007/3715"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.vupen.com/english/advisories/2008/0924/references"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
        }
      ],
      "sourceIdentifier": "secalert@redhat.com",
      "vendorComments": [
        {
          "comment": "Not vulnerable. This issue did not affect versions of Emacs as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
          "lastModified": "2007-11-09T00:00:00",
          "organization": "Red Hat"
        }
      ],
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "NVD-CWE-Other"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "4C8919F1-CD33-437E-9627-69352B276BA3",
                    "vulnerable": false
                  }
                ],
                "negate": false,
                "operator": "OR"
              },
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F4FB1FAE-4C0F-4F1E-B2D8-C56B5603937D",
                    "versionEndIncluding": "22.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ],
            "operator": "AND"
          },
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:gnu:emacs:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "F4FB1FAE-4C0F-4F1E-B2D8-C56B5603937D",
                    "versionEndIncluding": "22.1",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration."
          },
          {
            "lang": "es",
            "value": "La funci\u00f3n hack-local-variables en el Emacs anterior al 22.2, cuando el enable-local-variables est\u00e1 establecido a :safe, no busca correctamente las listas de las variables no seguras o de riesgo, lo que permite a permite a atacantes con la intervenci\u00f3n del usuario evitar las restricciones y modificar variables de programa cr\u00edticas a trav\u00e9s de un fichero que contiene declaraciones de variables Locales."
          }
        ],
        "id": "CVE-2007-5795",
        "lastModified": "2026-04-23T00:35:47.467",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "MEDIUM",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "LOCAL",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 6.3,
                "confidentialityImpact": "NONE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:L/AC:M/Au:N/C:N/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 3.4,
              "impactScore": 9.2,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2007-11-02T22:46:00.000",
        "references": [
          {
            "source": "secalert@redhat.com",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://docs.info.apple.com/article.html?artnum=307562"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://osvdb.org/42060"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27508"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27627"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27728"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/27984"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://secunia.com/advisories/29420"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.securityfocus.com/bid/26327"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.ubuntu.com/usn/usn-541-1"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2007/3715"
          },
          {
            "source": "secalert@redhat.com",
            "url": "http://www.vupen.com/english/advisories/2008/0924/references"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
          },
          {
            "source": "secalert@redhat.com",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://bugs.gentoo.org/show_bug.cgi?id=197958"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28\u0026r2=1.896.2.29"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://docs.info.apple.com/article.html?artnum=307562"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/42060"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27508"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27627"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27728"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/27984"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://secunia.com/advisories/29420"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://security.gentoo.org/glsa/glsa-200712-03.xml"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:034"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.securityfocus.com/bid/26327"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.ubuntu.com/usn/usn-541-1"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2007/3715"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.vupen.com/english/advisories/2008/0924/references"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/38263"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00524.html"
          }
        ],
        "sourceIdentifier": "secalert@redhat.com",
        "vendorComments": [
          {
            "comment": "Not vulnerable. This issue did not affect versions of Emacs as shipped with Red Hat Enterprise Linux 2.1, 3, 4, or 5.",
            "lastModified": "2007-11-09T00:00:00",
            "organization": "Red Hat"
          }
        ],
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "NVD-CWE-Other"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-11-21T13:18:30+00:00",
      "cve": "CVE-2007-5795",
      "id": "CVE-2007-5795",
      "initial_release_date": "2007-11-02T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "emacs insufficient safe mode checks",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2007/cve-2007-5795.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-08-23T23:57:08Z",
      "cve": "CVE-2007-5795",
      "id": "CVE-2007-5795",
      "initial_release_date": "2023-02-15T06:10:22Z",
      "product_status:recommended": "50",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2007-5795",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2007-5795.json",
      "version": "10"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.