logo

Database

Lack of data validation - Path Traversal In emacspeak

Description

extract-table.pl in Emacspeak 26 and 28 allows local users to overwrite arbitrary files via a symlink attack on the extract-table.csv temporary file.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2008-41912. NVD-2008-41913. OSV-DEBIAN-2008-41914. OSV-2008-41915. SECURITY-TRACKER-CVE-2008-4191

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.