VULNERABILITY INTELLIGENCE
CVE-2007-5795
CVSS score6.3 MEDIUM
EPSS probability0.72%
CISA KEVNot currently listed
Published2007-11-02
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:N/I:C/A:C
Description
The hack-local-variables function in Emacs before 22.2, when enable-local-variables is set to :safe, does not properly search lists of unsafe or risky variables, which might allow user-assisted attackers to bypass intended restrictions and modify critical program variables via a file containing a Local variables declaration.