A vulnerability has been reported in GNU Emacs, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the processing of the "enable-local-variables" variable when evaluating the file-local variable section. This can be exploited to evaluate the "eval" form and execute arbitrary Lisp code.

Successful exploitation requires that "enable-local-variables" is set to ":safe".

The vulnerability is reported in versions 23.2, 23.3, 23.4, and 24.1.

Solution
Apply patch.

Provided and/or discovered by
Paul Ling in a bug report.

Original Advisory
http://debbugs.gnu.org/cgi/bugreport.cgi?bug=12155

Deep Links
Links available to Secunia VIM customers