CVE-2007-2953

Debian Bug report logs - #435401 sandbox for vim allows attackers to execute shell commands and write files via modelines Package: vim; Maintainer for vim is Debian Vim Maintainers <team+vim@trackerdebianorg>; Source for vim is src:vim (PTS, buildd, popcon) Reported by: Steffen Joeris <steffenjoeris@skolelinuxde> ...

Ulf Harnhammar discovered that vim does not properly sanitise the “helptags_one()” function when running the “helptags” command By tricking a user into running a crafted help file, a remote attacker could execute arbitrary code with the user’s privileges ...

Synopsis Moderate: vim security update Type/Severity Security Advisory: Moderate Topic Updated vim packages that fix security issues are now available for Red HatEnterprise Linux 5This update has been rated as having moderate security impact by the Red HatSecurity Response Team Description ...

Synopsis Moderate: vim security update Type/Severity Security Advisory: Moderate Topic Updated vim packages that fix various security issues are now available forRed Hat Enterprise Linux 3 and 4This update has been rated as having moderate security impact by the RedHat Security Response Team Desc ...

Several vulnerabilities have been discovered in the vim editor The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2007-2953 Ulf Härnhammar discovered that a format string flaw in helptags_one() from src/ex_cmdsc (triggered through the helptags command) can lead to the execution of arbitrary code ...