vim development group vim 5.7 vulnerabilities and exploits

(subscribe to this query)

VIM prior to 6.3 and gVim prior to 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) ...

Vim Development Group Vim 5.6 Vim Development Group Vim 5.7 Vim Development Group Vim 5.8 Vim Development Group Vim 6.3.044 Vim Development Group Vim 5.2 Vim Development Group Vim 5.3 Vim Development Group Vim 6.2 Vim Development Group Vim 6.3.011 Vim Development Group Vim 5.4 Vim Development Group Vim 5.5 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 5.0 Vim Development Group Vim 5.1 Vim Development Group Vim 6.0 Vim Development Group Vim 6.1

vim 6.0 and 6.1, and possibly other versions, allows malicious users to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.

Vim Development Group Vim 5.0 Vim Development Group Vim 5.1 Vim Development Group Vim 5.8 Vim Development Group Vim 6.0 Vim Development Group Vim 6.1 Vim Development Group Vim 5.2 Vim Development Group Vim 5.3 Vim Development Group Vim 5.4 Vim Development Group Vim 5.5 Vim Development Group Vim 5.6 Vim Development Group Vim 5.7

vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow malicious users to execute arbitrary commands when another user opens a file containing malicious VIM control codes.

Vim Development Group Vim 5.7

vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.

Vim Development Group Vim 5.7

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook