Mondoo

Vulnerability Management
Technology
Services

Solutions

Financial Services
Manufacturing
Healthcare

Resources

Blog
Vulnerability Database
Documentation
GitHub

Company

About
Careers
Partners
Contact

Legal

Privacy
Terms
Imprint

Vulnerability IntelligenceCVE-2024-30203

CVE-2024-30203

MEDIUM5.5

In Emacs before 29

Published Mar 25, 2024

Modified 1 years ago

Details

In Emacs before 29.3, Gnus treats inline MIME contents as trusted.

References

WEB

http://www.openwall.com/lists/oss-security/2024/03/25/2

WEB

http://www.openwall.com/lists/oss-security/2024/04/08/3

WEB

http://www.openwall.com/lists/oss-security/2024/04/08/4

WEB

http://www.openwall.com/lists/oss-security/2024/04/08/6

WEB

http://www.openwall.com/lists/oss-security/2024/04/08/7

WEB

http://www.openwall.com/lists/oss-security/2024/04/10/3

WEB

http://www.openwall.com/lists/oss-security/2024/04/10/4

WEB

http://www.openwall.com/lists/oss-security/2024/04/10/5

WEB

http://www.openwall.com/lists/oss-security/2024/04/10/6

WEB

http://www.openwall.com/lists/oss-security/2024/04/11/4

WEB

http://www.openwall.com/lists/oss-security/2024/04/11/5

WEB

http://www.openwall.com/lists/oss-security/2024/04/11/6

WEB

https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-29&id=937b9042ad7426acdcca33e3d931d8f495bdd804

WEB

https://git.savannah.gnu.org/cgit/emacs.git/tree/etc/NEWS?h=emacs-29

WEB

https://lists.debian.org/debian-lts-announce/2024/04/msg00023.html

WEB

https://lists.debian.org/debian-lts-announce/2024/04/msg00024.html

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2024-30203

CVSS Analysis

CVSS v3.1

5.5

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

NoneI:N

Availability

HighA:H

5.5/CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Ecosystems

Timeline

PublishedMar 25, 2024

ModifiedNov 7, 2024

CVE-2024-30203 | Mondoo Vulnerability Intelligence