vim development group vim vulnerabilities and exploits

(subscribe to this query)

VIM prior to 6.3 and gVim prior to 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) ...

Vim Development Group Vim 5.6 Vim Development Group Vim 5.7 Vim Development Group Vim 5.8 Vim Development Group Vim 6.3.044 Vim Development Group Vim 5.2 Vim Development Group Vim 5.3 Vim Development Group Vim 6.2 Vim Development Group Vim 6.3.011 Vim Development Group Vim 5.4 Vim Development Group Vim 5.5 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 5.0 Vim Development Group Vim 5.1 Vim Development Group Vim 6.0 Vim Development Group Vim 6.1

vim 6.0 and 6.1, and possibly other versions, allows malicious users to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.

Vim Development Group Vim 5.0 Vim Development Group Vim 5.1 Vim Development Group Vim 5.8 Vim Development Group Vim 6.0 Vim Development Group Vim 6.1 Vim Development Group Vim 5.2 Vim Development Group Vim 5.3 Vim Development Group Vim 5.4 Vim Development Group Vim 5.5 Vim Development Group Vim 5.6 Vim Development Group Vim 5.7

vim 6.3 prior to 6.3.082, with modelines enabled, allows external user-assisted malicious users to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Vim Development Group Vim 6.3.081 Vim Development Group Vim 6.3 Vim Development Group Vim 6.3.011 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 6.3.044

Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and previous versions, and 7.x up to 7.1, allows user-assisted remote malicious users to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the help...

Vim Development Group Vim 7.1 Vim Development Group Vim 7.1.38 Vim Development Group Vim Vim Development Group Vim 7.0

The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.

Vim Development Group Vim 6.3.011 Vim Development Group Vim 6.3.025 Vim Development Group Vim 6.3.030 Vim Development Group Vim 6.3.044

vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow malicious users to execute arbitrary commands when another user opens a file containing malicious VIM control codes.

Vim Development Group Vim 5.7

vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.

Vim Development Group Vim 5.7

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook