emacs -- enriched text remote code execution vulnerability
Paul Eggert reports:
Charles A. Roelli has found a security flaw in the enriched mode in GNU Emacs.
When Emacs renders MIME text/enriched data (Internet RFC 1896), it
is vulnerable to arbitrary code execution. Since Emacs-based mail
clients decode "Content-Type: text/enriched", this code is exploitable
remotely. This bug affects GNU Emacs versions 19.29 through 25.2.
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright