CVE-2007-5795

Severity: medium (CVSS 6.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-11-02 · updated 2026-06-16

Description

The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.

Affected products

GNU Emacs: through 22.1

References

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=449008
http://bugs.gentoo.org/show_bug.cgi?id=197958
http://cvs.savannah.gnu.org/viewvc/emacs/emacs/lisp/files.el?r1=1.896.2.28&r2=1.896.2.29
http://docs.info.apple.com/article.html?artnum=307562
http://lists.apple.com/archives/security-announce/2008/Mar/msg00001.html
http://osvdb.org/42060
http://secunia.com/advisories/27508
http://secunia.com/advisories/27627
http://secunia.com/advisories/27728
http://secunia.com/advisories/27984
http://secunia.com/advisories/29420
http://security.gentoo.org/glsa/glsa-200712-03.xml

Get alerted when CVE-2007-5795 or the next vulnerability affects your stack