CVE-2014-3424

Name of the Vulnerable Software and Affected Versions GNU Emacs versions 24.3 and earlier

Description The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file in /tmp/tramp.#####.

Recommendations For GNU Emacs versions 24.3 and earlier, consider updating to a version that contains a fix for this issue, as using a version prior to the fixed one poses a risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.