vim development group vim 6.3.030 vulnerabilities and exploits

(subscribe to this query)

The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.

Vim Development Group Vim 6.3.011 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 6.3.044

vim 6.3 prior to 6.3.082, with modelines enabled, allows external user-assisted malicious users to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Vim Development Group Vim 6.3.081 Vim Development Group Vim 6.3 Vim Development Group Vim 6.3.011 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 6.3.044

VIM prior to 6.3 and gVim prior to 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) ...

Vim Development Group Vim 5.6 Vim Development Group Vim 5.7 Vim Development Group Vim 5.8 Vim Development Group Vim 6.3.044 Vim Development Group Vim 5.2 Vim Development Group Vim 5.3 Vim Development Group Vim 6.2 Vim Development Group Vim 6.3.011 Vim Development Group Vim 5.4 Vim Development Group Vim 5.5 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 5.0 Vim Development Group Vim 5.1 Vim Development Group Vim 6.0 Vim Development Group Vim 6.1

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook