CVE-2012-0035

Untrusted search path vulnerability in EDE in CEDET before 1.0.1, as used in GNU Emacs before 23.4 and other products, allows local users to gain privileges via a crafted Lisp expression in a Project.ede file in the directory, or a parent directory, of an opened file.

• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html
• http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.htmlPatch
• http://openwall.com/lists/oss-security/2012/01/10/2Patch
• http://openwall.com/lists/oss-security/2012/01/10/4
• http://secunia.com/advisories/47311Vendor Advisory
• http://secunia.com/advisories/47515Vendor Advisory
• http://secunia.com/advisories/50801
• http://sourceforge.net/mailarchive/message.php?msg_id=28649762
• http://sourceforge.net/mailarchive/message.php?msg_id=28657612
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:076
• http://www.ubuntu.com/usn/USN-1586-1
• https://security.gentoo.org/glsa/201812-05
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072285.html
• http://lists.fedoraproject.org/pipermail/package-announce/2012-January/072288.html
• http://lists.gnu.org/archive/html/emacs-devel/2012-01/msg00387.htmlPatch
• http://openwall.com/lists/oss-security/2012/01/10/2Patch
• http://openwall.com/lists/oss-security/2012/01/10/4
• http://secunia.com/advisories/47311Vendor Advisory
• http://secunia.com/advisories/47515Vendor Advisory
• http://secunia.com/advisories/50801
• http://sourceforge.net/mailarchive/message.php?msg_id=28649762
• http://sourceforge.net/mailarchive/message.php?msg_id=28657612
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:076
• http://www.ubuntu.com/usn/USN-1586-1
• https://security.gentoo.org/glsa/201812-05

Published

Jan 19, 2012

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-0029Heap-based buffer overflow in the process_tx_desc function i…
• CVE-2012-0030Nova 2011.3 and Essex, when using the OpenStack API, allows …
• CVE-2012-0031scoreboard.c in the Apache HTTP Server 2.2.21 and earlier mi…
• CVE-2012-0032Red Hat JBoss Operations Network (JON) before 3.0.1 uses 077…
• CVE-2012-0033The CBounceDCCMod::OnPrivCTCP function in bouncedcc.cpp in t…
• CVE-2012-0034The NonManagedConnectionFactory in JBoss Enterprise Applicat…
• CVE-2012-0036curl and libcurl 7.2x before 7.24.0 do not properly consider…
• CVE-2012-0037Redland Raptor (aka libraptor) before 2.0.7, as used by Open…6.5
• CVE-2012-0038Integer overflow in the xfs_acl_from_disk function in fs/xfs…5.5
• CVE-2012-0039GLib 2.31.8 and earlier, when the g_str_hash function is use…7.5
• CVE-2012-0040Cross-site scripting (XSS) vulnerability in modules/core/www…
• CVE-2012-0041The dissect_packet function in epan/packet.c in Wireshark 1.…