CVE:CVE-2014-3422
CNNVD:CNNVD-201405-167
GNU Emacs是GNU计划开发的一个使用C语言编写的Unix文本编辑器，它支持语法高亮显示、多种语言和功能扩展等。
GNU Emacs 24.3及之前的版本的lisp/emacs-lisp/find-gc.el文件中存在安全漏洞。本地攻击者可通过对/tmp/esrc/目录下的临时文件实施符号链接攻击利用该漏洞覆盖任意文件。
solution:Upgrade gnu emacs to a higher version than 24.3,20.0,20.1,20.2,20.3,20.4,20.5,20.6,20.7,21,21.1,21.2,21.2.1,21.3,21.3.1,21.4,22.1,22.2,22.3,23.1,23.2,23.3,23.4,24.1,24.2,and avoid the version (,24.3],20.0,20.1,20.2,20.3,20.4,20.5,20.6,20.7,21,21.1,21.2,21.2.1,21.3,21.3.1,21.4,22.1,22.2,22.3,23.1,23.2,23.3,23.4,24.1,24.2; Upgrade mageia_project mageia to a higher version than 3,4,and avoid the version 3,4